Roles and permissions

Every member of your organisation has one role. It decides who can manage people and who can see pay.

← Back to Help Center

The roles

Owner

The person who created the organisation and holds its subscription. Everything an admin can do.

Admin

Invites and deactivates members, changes their roles, and sees pay rates, wages and the payroll export.

Other members

Work in the Back Office and Workbooks, but cannot manage people and never see pay. Choose the role that best describes the job when you invite them.

Every role only ever reaches your own organisation's data: the database itself keeps each organisation's rows apart, whatever the role.

Who sees pay

Pay rates, wages and labour cost are visible only to owners and admins, everywhere they appear: employee records, time entries, labour reports and the payroll export. Everyone else sees hours without money.

Changing someone's role

Owners and admins manage members under Users in the Back Office. If you need someone's role changed and don't see the option there, contact us and we'll change it for you.

The AI connector

When someone connects Claude to CashSheet, Claude sees exactly what that person's role sees, nothing more, so a member's assistant also gets hours without pay. It can add or update menu items only if the person allowed it when connecting. See AI Connector.

Best practices

  • Keep admins few, but never one. Two people who can manage the account is the right number for most businesses.
  • Review members every quarter. People change jobs and leave; a quick look catches access nobody needs any more.
  • Don't share accounts. Everyone who needs the Back Office gets their own sign-in, so the history ties actions to people.
  • Till staff use PINs, not accounts. See Till staff are different.