Permissions
Permissions control what users can do in Flow Retail. This page is a complete reference of all available permissions — useful when creating custom roles or understanding what each system role includes.
Looking for role recommendations?
Most users don't need to know individual permissions. See Roles for guidance on which role to assign.
Permission levels
Permissions can be assigned at three levels:
Tenant
Applies across all stores and all organizations in your account
Organization
Applies to all stores within a specific organization
Store
Applies to a specific store only
When a permission supports multiple levels, users can be granted access at any of these levels. Tenant-level access grants the broadest scope, while store-level access is the most restrictive.
All permissions
Tenant-level permissions
These permissions can only be assigned at the tenant level and grant access across all stores.
PRODUCT
Product Management
View, create, edit, and delete products, including variants, barcodes, media, and product properties.
CATEGORY
Category Management
Manage product categories used to organize your product catalog.
BRAND
Brand Management
Create, edit, and delete product brands.
PRODUCT_GROUP
Product Group Management
Manage product groups used for filtering, reporting, and organizing products.
SUPPLIER
Supplier Management
Manage supplier records and supplier-product links, including purchase pricing.
WARRANTY
Warranty Management
Configure warranty types and rules that can be attached to products.
USER
User Management
Manage user accounts, invite new users, assign roles, and configure access.
STORE
Store Management
Create and configure stores, including store settings and opening hours.
WAREHOUSE
Warehouse Management
Manage warehouse locations within stores, used for stock organization and inventory tracking.
DEVICE
Device Management
Register and manage POS devices, including device configuration and pairing.
PRINTER
Printer Management
Configure printers for receipt and label printing, including printer assignments.
CONSENT
Consent Management
Manage customer consent types and GDPR-related data collection preferences.
NUMBER_SERIE
Number Series Management
Configure number sequences for orders, invoices, and other documents.
DELIVERY_METHOD
Delivery Method Management
Configure delivery providers, shipping methods, and delivery options.
ORDER_HANDLING
Order Handling Management
Configure order handling workflows, status transitions, and automated processing rules.
PAYMENT_METHOD
Payment Method Management
Manage payment methods, configure payment providers, and set up payment terminals.
EXTENSION
Extension Management
Install, configure, and manage third-party extensions and integrations.
ORGANIZATION
Organization Management
Create and manage organizational units used to group stores.
TENANT
Tenant Management
Access tenant-level settings, branding, and core business configuration.
IMPORT
Import Management
Import products, customers, and other data via bulk import tools.
WEBHOOK
Webhook Management
Set up webhooks to notify external systems about events.
TILL_OPERATIONS
Till Management
Manage cash registers (tills), perform cash counts, and handle daily cash reconciliation.
PRICELIST
Pricelist Management
Create and manage price lists for different customer groups, currencies, or sales channels.
TENANT_ADMIN
Tenant Administrator
Full administrative access to all functions. Bypasses all other permission checks.
Limit Tenant Administrator to a select few individuals to avoid granting unrestricted access to all resources.
Multi-level permissions
These permissions can be assigned at tenant, organization, or store level, allowing for granular access control.
STOCK
Stock Management
View and adjust inventory levels, transfer stock between locations, and manage stock movements.
STOCKTAKING
Stocktaking
Create and perform stock counts, reconcile inventory discrepancies, and manage stocktaking sessions.
REPORTING
Reporting
Access sales, inventory, and financial reports.
SALES_ORDER
Sales Orders
Create, view, and manage sales orders, including checkout operations and order modifications.
RETURN_ORDER
Return Orders
Process customer returns, issue refunds, and manage return merchandise authorizations.
PURCHASE
Purchase Orders
Create and manage purchase orders to suppliers, track order status, and manage procurement.
RECEIVEMENT
Goods Receiving
Receive incoming goods from purchase orders, verify deliveries, and book stock into inventory.
CUSTOMER
Customer Management
View, create, and edit customer records, manage customer groups, and access customer history.
CAMPAIGN
Campaign Management
Create and manage promotional campaigns, discounts, and special offers.
SERVICE
Service Orders
Create and manage service orders for repairs, maintenance, and after-sales service work.
System roles and their permissions
The table below shows which permissions are included in each default system role. For descriptions of what each role is designed for, see Roles.
TENANT_ADMIN
✅
PRODUCT
✅
✅
CATEGORY
✅
✅
BRAND
✅
✅
PRODUCT_GROUP
✅
✅
SUPPLIER
✅
✅
WARRANTY
✅
✅
USER
✅
STORE
✅
✅
✅
WAREHOUSE
✅
✅
✅
DEVICE
✅
✅
PRINTER
✅
✅
CONSENT
✅
✅
NUMBER_SERIE
✅
✅
DELIVERY_METHOD
✅
✅
ORDER_HANDLING
✅
✅
PAYMENT_METHOD
✅
✅
EXTENSION
✅
✅
ORGANIZATION
✅
✅
TENANT
✅
✅
IMPORT
✅
✅
WEBHOOK
✅
✅
TILL_OPERATIONS
✅
✅
✅
PRICELIST
✅
✅
STOCK
✅
✅
✅
✅
STOCKTAKING
✅
✅
✅
REPORTING
✅
✅
✅
✅
SALES_ORDER
✅
✅
✅
RETURN_ORDER
✅
✅
✅
PURCHASE
✅
✅
✅
RECEIVEMENT
✅
✅
✅
CUSTOMER
✅
✅
✅
CAMPAIGN
✅
✅
SERVICE
✅
✅
Last updated
Was this helpful?