Roles & permissions

Who can see this?

The person at the counter needs the price. They do not need what you paid for it. Lunix lets you draw that line once, per role, and then stops having the conversation.

Start free trial

Free 30-minute group demo every weekday at 11 AM ET · 14 days free · cancel anytime

The same product rowManagerUSB-C cable 2 mPrice $12.00 Cost $4.10 Margin 66% Sales staffUSB-C cable 2 mPrice $12.00 CostMarginOne permissionAccess To PriceOff for sales staff

How it works today

1Everybody logs in as the owner, because splitting it was never worth the afternoon.
2So everybody can see cost, margin and the day's total — or nobody can do anything without you.
3And when a price gets changed or a sale gets voided, there is no way to say who did it.

How it works in Lunix

102 switches, grouped the way the shop is

A role is not three tiers with a sad face next to the cheap one. It is 102 individual permissions across 14 categories — Staff, Products, Order, Customer, Cash Register, Finance & Report, Reports, Accounts Receivable, Settings, Tax & Fiscal, Inventory, Analytics & Activity, Messaging and Repair Parts Inventory — and a role is whichever subset you switch on. The editor keeps a running count, so « of permissions enabled» is the whole answer to what a role can do.

Settings · Roles · Permissions
Category
Switches
Manager
Sales
Reports
33
33
0
Order
12
12
4
Products
8
8
2
Finance & Report
6
6
0
Cash Register
5
5
3

Three roles already exist before you configure anything

Every store is seeded with Manager, Sales Staff and Tech Staff, so a new shop can put somebody behind the counter on day one. The gap between them is the point: the manager carries all 102, the counter carries 13. They are read-only on purpose — «This role can't be edited. Duplicate it to make an editable copy.» Your copy is yours to cut down, and the original stays as the thing you can always go back to.

Settings · Roles
Manager (System Role)102 of 102Everything. It is the owner's deputy, not a middle tier
Sales Staff (System Role)13 of 102Sell, take payment, look a customer up. No cost, no margin
Tech Staff (System Role)11 of 102Repairs, parts and the bench. Not the money screens

Getting in is a different question from what you can do

A permission decides what a person can reach; a PIN decides that it is really them at the till. Inviting somebody emails them a link and they set their own password — you never type or know it, and there is no PIN to hand around. At the counter a 4- or 6-digit PIN is what separates one person's sales from another's, and you can require it again before each transaction on the shared screen. Too many wrong tries locks it for a while, because a four-digit code that can be guessed all afternoon is not a control.

Settings · Access
Their own loginThe invite emails them a link and they set their own password. Nobody shares one.
A PIN at the counter4 or 6 digits, per person — how a shared screen still knows who sold it.
PIN before each transactionOptional, and worth it where one screen is used by everybody all day.
Locked after too many triesWrong PINs lock the pad for a while, so it cannot simply be guessed.
The number it surfaces

What is switchable, and who is actually switched on

Permissions are only worth having if you can answer these without opening four screens.

102Permissions you can switch
14Categories they group into
2 of 9People who can see cost and margin
3Roles seeded for every store

The catalogue is append-only — permissions get split apart as the product grows, and when one is split the roles that had the old one keep the new one, so nobody silently loses access after an update. That is also why the first number goes up over time and never down, and why a role you built two years ago still does what you set it to do.

Decide who sees what, once.

We host a free 30-minute group demo every weekday at 11 AM ET. Bring your questions — nobody sells at you.

Start free trial