Every employee gets their own user with permissions that match their role. Don't share one user between multiple people — it breaks reports, alerts, and access limits.
| Role | Sees | Can do |
|---|---|---|
| Owner | Everything | Everything, including cancellations and billing settings |
| Admin | Everything | Everything except billing settings |
| Manager | Everything in their branch | Documents, appointments, staff. No settings |
| Staff | Their own calendar, customers, POS | Day-to-day operations. Doesn't see financial reports |
| Cashier | POS only | Sales. Can't cancel without a Manager |
When someone leaves — don't delete. Suspend. The documents they issued must keep their name on record for audit purposes. Suspending blocks login immediately but keeps the history intact.