# Permissions Permissions control what users can do in Flow Retail. This page is a complete reference of all available permissions — useful when creating custom roles or understanding what each system role includes. {% hint style="success" %} #### Looking for role recommendations? Most users don't need to know individual permissions. See Roles for guidance on which role to assign. {% endhint %} ### Permission levels Permissions can be assigned at three levels: | Level | Description | | ---------------- | ----------------------------------------------------------------------- | | **Tenant** | Applies across **all stores** and **all organizations** in your account | | **Organization** | Applies to **all stores** within a specific organization | | **Store** | Applies to a **specific store** only | When a permission supports multiple levels, users can be granted access at any of these levels. Tenant-level access grants the broadest scope, while store-level access is the most restrictive. *** ### All permissions #### Tenant-level permissions These permissions can only be assigned at the tenant level and grant access across all stores. | Permission | Name | Description | | ---------------- | -------------------------- | ----------------------------------------------------------------------------------------------------- | | PRODUCT | Product Management | View, create, edit, and delete products, including variants, barcodes, media, and product properties. | | CATEGORY | Category Management | Manage product categories used to organize your product catalog. | | BRAND | Brand Management | Create, edit, and delete product brands. | | PRODUCT\_GROUP | Product Group Management | Manage product groups used for filtering, reporting, and organizing products. | | SUPPLIER | Supplier Management | Manage supplier records and supplier-product links, including purchase pricing. | | WARRANTY | Warranty Management | Configure warranty types and rules that can be attached to products. | | USER | User Management | Manage user accounts, invite new users, assign roles, and configure access. | | STORE | Store Management | Create and configure stores, including store settings and opening hours. | | WAREHOUSE | Warehouse Management | Manage warehouse locations within stores, used for stock organization and inventory tracking. | | DEVICE | Device Management | Register and manage POS devices, including device configuration and pairing. | | PRINTER | Printer Management | Configure printers for receipt and label printing, including printer assignments. | | CONSENT | Consent Management | Manage customer consent types and GDPR-related data collection preferences. | | NUMBER\_SERIE | Number Series Management | Configure number sequences for orders, invoices, and other documents. | | DELIVERY\_METHOD | Delivery Method Management | Configure delivery providers, shipping methods, and delivery options. | | ORDER\_HANDLING | Order Handling Management | Configure order handling workflows, status transitions, and automated processing rules. | | PAYMENT\_METHOD | Payment Method Management | Manage payment methods, configure payment providers, and set up payment terminals. | | EXTENSION | Extension Management | Install, configure, and manage third-party extensions and integrations. | | ORGANIZATION | Organization Management | Create and manage organizational units used to group stores. | | TENANT | Tenant Management | Access tenant-level settings, branding, and core business configuration. | | IMPORT | Import Management | Import products, customers, and other data via bulk import tools. | | WEBHOOK | Webhook Management | Set up webhooks to notify external systems about events. | | TILL\_OPERATIONS | Till Management | Manage cash registers (tills), perform cash counts, and handle daily cash reconciliation. | | PRICELIST | Pricelist Management | Create and manage price lists for different customer groups, currencies, or sales channels. | | TENANT\_ADMIN | Tenant Administrator | Full administrative access to all functions. Bypasses all other permission checks. | {% hint style="warning" %} Limit **Tenant Administrator** to a select few individuals to avoid granting unrestricted access to all resources. {% endhint %} #### Multi-level permissions These permissions can be assigned at tenant, organization, or store level, allowing for granular access control. | Permission | Name | Description | | ------------- | ------------------- | ---------------------------------------------------------------------------------------------------- | | STOCK | Stock Management | View and adjust inventory levels, transfer stock between locations, and manage stock movements. | | STOCKTAKING | Stocktaking | Create and perform stock counts, reconcile inventory discrepancies, and manage stocktaking sessions. | | REPORTING | Reporting | Access sales, inventory, and financial reports. | | SALES\_ORDER | Sales Orders | Create, view, and manage sales orders, including checkout operations and order modifications. | | RETURN\_ORDER | Return Orders | Process customer returns, issue refunds, and manage return merchandise authorizations. | | PURCHASE | Purchase Orders | Create and manage purchase orders to suppliers, track order status, and manage procurement. | | RECEIVEMENT | Goods Receiving | Receive incoming goods from purchase orders, verify deliveries, and book stock into inventory. | | CUSTOMER | Customer Management | View, create, and edit customer records, manage customer groups, and access customer history. | | CAMPAIGN | Campaign Management | Create and manage promotional campaigns, discounts, and special offers. | | SERVICE | Service Orders | Create and manage service orders for repairs, maintenance, and after-sales service work. | *** ### System roles and their permissions The table below shows which permissions are included in each default system role. For descriptions of what each role is designed for, see Roles.
PermissionAdministratorBackofficeStore ManagerSalespersonAccountingWarehouse
TENANT_ADMIN✅
PRODUCT✅✅
CATEGORY✅✅
BRAND✅✅
PRODUCT_GROUP✅✅
SUPPLIER✅✅
WARRANTY✅✅
USER✅
STORE✅✅✅
WAREHOUSE✅✅✅
DEVICE✅✅
PRINTER✅✅
CONSENT✅✅
NUMBER_SERIE✅✅
DELIVERY_METHOD✅✅
ORDER_HANDLING✅✅
PAYMENT_METHOD✅✅
EXTENSION✅✅
ORGANIZATION✅✅
TENANT✅✅
IMPORT✅✅
WEBHOOK✅✅
TILL_OPERATIONS✅✅✅
PRICELIST✅✅
STOCK✅✅✅✅
STOCKTAKING✅✅✅
REPORTING✅✅✅✅
SALES_ORDER✅✅✅
RETURN_ORDER✅✅✅
PURCHASE✅✅✅
RECEIVEMENT✅✅✅
CUSTOMER✅✅✅
CAMPAIGN✅✅
SERVICE✅✅