Roles and permissions
Audience: Owner / admin
Objective: Assign the right role without over-sharing access.
Roles
| Role | Intended for |
|---|---|
admin | Owners / full control |
manager | Ops leads; most config; cannot grant admin |
cashier | Desk, POS, F&B service, limited CRM writes, AI ask, payroll self |
housekeeping | Room tasks / /hk |
Capability overview
| Area | admin | manager | cashier | housekeeping |
|---|---|---|---|---|
| Dashboard & reports | ✓ | ✓ | ✓ | - |
| Front desk | ✓ | ✓ | ✓ | - |
| Housekeeping tasks | ✓ | ✓ | - | ✓ |
| POS & sales | ✓ | ✓ | ✓ | - |
| Purchases | ✓ | ✓ | - | - |
| Property settings | ✓ | ✓ | - | - |
| Night audit | ✓ | ✓ | - | - |
| Team / audit / workspace settings | ✓ | ✓ | - | - |
| CRM view | ✓ | ✓ | ✓ | - |
| CRM manage | ✓ | ✓ | limited* | - |
| CRM export | ✓ | ✓ | - | - |
| F&B serve / settle / kitchen | ✓ | ✓ | ✓ | - |
| F&B configure / void | ✓ | ✓ | void via PIN | - |
| HR / payroll admin | ✓ | ✓ | - | - |
Payroll self /payroll/me | ✓ | ✓ | ✓ | - |
| AI assistant | ✓ | ✓ | ✓ | - |
| AI propose / approve | ✓ | ✓ | - | - |
* Cashiers: activities, guest↔party link, quote create/convert only.
Related
- Modules & RBAC
- Team & roles
- Full engineering matrix:
docs/rbac-matrix.md