Permissions, approvals and PINs

Labels in bold are written exactly as they appear in the app.

What permissions are

Built-in roles carry a set; custom roles pick their own. The full list (99 permissions) is grouped in the role editor: POS & Transaksi, Dapur, Kiosk, Produk & Inventaris, Pengiriman, Staf & SDM, Keuangan & Laporan, Meja, Layar, Administrasi, Tiket, Developer / API. "Request" and "approve" permissions are separate, so whoever asks cannot automatically approve.

Switching permissions off for one person

In the staff detail sheet the Izin tab shows what that person can really do. Tap Izin fitur for Izin Per-Pengguna: a switch per permission, Aktifkan semua / Matikan semua per group, and Reset semua. Resolution order: per-user override, then custom role, then built-in role. An override can only switch off permissions the role has (others are labelled "Tidak di peran"); a switched-off permission shows struck through with a Dimatikan badge. Changes autosave and apply on the next session or sign-in. Sensitive permissions (approve refund, approve deletion, manage staff, cash control and others) carry a Sensitif badge. The owner always has everything and cannot be restricted.

Granting permissions to one person

The owner can grant some permissions to one person beyond their role: Lihat omzet dan total penjualan, Ubah & Tutup Absensi. Granting a higher one adds the lower ones. Izin tab → Izin fitur → switch it on; the badge Diberikan owner appears. Owner only; applies after a reload or sign-in. Example: a night-shift Supervisor gets Lihat Absensi only, or all three attendance keys if they also close forgotten sessions and approve leave.

Supervisor (SPV) and Captain Shift defaults

A built-in Supervisor holds POS and checkout, discounts, request and approve voids, approve refunds and deletions, shifts with Kelola Shift and Kontrol Kas, stock view and edit, customers, tables, Checker and KDS screens, operational settings and Lihat Staf. It does not hold Lihat Absensi, Setujui Permintaan, payroll, revenue totals or Kelola Staf. For a Captain Shift who should monitor or manage attendance, use Supervisor and grant the attendance keys per person, or build a custom role.

Who can approve what

The role column lists the built-in roles holding the permission by default. Custom roles can add or remove.

See Opname (Owner & Manajer) / Stock Count Guide (Owner & Manager). Kelola Shift, for the manager Shift page, is held by Owner, Manager, Supervisor, HR & Admin (The Shift page for managers).

Void approval PIN

• Only people holding Setujui Void see this row: Pengaturan → Akun & keamanan → Keamanan → PIN persetujuan void. Enter PIN baru (4-8 angka), tap Simpan PIN. The status becomes "Aktif · diatur {date}"; Matikan PIN removes it.
• Easily guessed PINs are refused ("PIN ini terlalu mudah ditebak...").
• On the till, a cashier who may not approve alone taps PIN manajer, picks a name under Siapa yang menyetujui?, types that person's PIN and taps Batalkan dengan PIN. The name list only holds active members who hold Setujui Void and have set a PIN. The void is logged under the approver.
• A wrong PIN shows the attempts left; too many wrong tries lock it for 15 minutes.
• Cashiers have no approval PIN: they only request, or type an approver's PIN. Till steps: Cancelling items or a bill.