Permissions

The Roles & Permissions page is where you decide who can do what in Zavo.

There are two completely separate worlds to manage:

• Dashboard Roles — what your office team can see and do on the Dashboard (you’re in the Dashboard right now). Things like editing menus, viewing reports, processing refunds, inviting other users.
• POS Roles — what your floor staff can do on the iPad during a shift. Things like taking orders, applying discounts, voiding items, closing the register.

You’ll come here when you want to:

• Stop a new server from comping drinks until they’ve earned the trust
• Let a head host see the reservations book without giving them the keys to the menu
• Build a “Read‑only Accountant” role that can see reports but can’t change anything
• Tighten things up after an incident — for example, restricting custom discounts to managers only

You’ll find the page from the Users page — tap Manage Permissions in the top‑right.

How roles, users and staff fit together

A few words on the model so the rest of the page makes sense:

• A role is a named bundle of permissions — e.g. Manager, Server, Read‑only.
• A dashboard user is a person who logs into the Dashboard with an email and password. Each one is assigned one Dashboard Role that decides what they see.
• A staff member is a person who clocks into the iPad with a PIN. Each one is assigned one POS Role that decides what they can do during a shift.

Roles are the lever — set them up once, then assign people to them on the Users page. Change a role’s permissions, and every user or staff member with that role updates instantly.

The page at a glance

Across the top:

• Title: Roles & Permissions
• Subtitle: Manage roles and their permissions for dashboard and POS
• Add Role button on the right — adds a role to whichever tab is currently open

Below that, two tabs:

• Dashboard Roles
• POS Roles

The rest of the page is a list of role cards. Each card is collapsed by default; tap the row (or the chevron on the left) to expand it and see every permission that role has.

Dashboard Roles tab

This is where you manage the roles for your office team — the people who log in to the web Dashboard.

What a role card shows

Each role appears as a horizontal row:

• A chevron on the left — points right when collapsed, down when expanded
• The role name in bold
• Small badges:
  • System — a built‑in role that can’t be renamed or deleted (e.g. the Admin role)
  • All Access — appears on the Admin role, where every permission is locked on
• A permission count like 15 of 42 permissions showing how much access this role has

On the right of each row:

• A small status indicator — a spinner while a change is saving, then a green tick for two seconds when it’s done
• A pencil icon — opens the Rename Role dialog (hidden on system roles)
• A red trash icon — opens the Delete Role confirmation (hidden on system roles)

If there are no roles yet, you’ll see “No dashboard roles configured. Add a role to get started.”

What’s inside a role (when expanded)

Tap the row to expand it. The card now shows every permission grouped into sections, each with a shield icon and the section name. Inside each section is a list of permissions — each one with a name on the left and a toggle switch on the right.

Switch a toggle on to grant the permission, off to remove it. Changes save the moment you flip the switch — no save button to remember.

The Admin role’s toggles are all locked on and disabled, so you can’t accidentally take away your own keys.

Every Dashboard permission

The permissions are grouped into 15 sections. Use this as a reference when designing your roles.

POS Roles tab

This is where you manage the roles your floor staff get when they punch their PIN into the iPad.

POS Roles are scoped to a single location. You’ll see different roles depending on which venue is selected at the top of the Dashboard. If no location is selected, the tab just reads:

“Select a location to manage POS staff roles.”

Pick a venue from the location switcher and the tab fills in.

What’s different from Dashboard Roles

The card layout is identical — chevron, name, badges, permission count, edit and delete icons. But once you expand a POS role, there’s an extra setting at the top before the permission list:

Can Override

A toggle labelled Can Override with the description “Allow this role to override other staff actions on the POS.”

Override is the thing managers do all the time on the floor — “I’ll override that void”, “I’ll authorise that comp”. When this toggle is on, anyone with this role can step in to authorise an action another staff member doesn’t have permission to do.

It’s typically only on for Manager roles. Like permissions, it’s locked on for the Admin role and disabled for it.

Every POS permission

POS permissions are grouped into six sections.

Adding a new role

Tap Add Role in the top‑right of the page. It adds a role to whichever tab is currently open.

Renaming a role

Tap the pencil icon on a role’s row. The Rename Role dialog opens, pre‑filled with the current name. Change it and tap Save (or press Enter).

System roles (e.g. Admin) don’t have a pencil icon — they can’t be renamed.

Deleting a role

Tap the red trash icon on a role’s row. A confirmation dialog appears:

“Are you sure you want to delete the [role name] role? This action cannot be undone. [Users / Staff] assigned to this role will lose their permissions.”

The wording adapts to the kind of role — Users for Dashboard, Staff for POS.

Tap Delete Role (red) to confirm or Cancel to back out.

System roles can’t be deleted — they have no trash icon at all.

Saving — what to expect

There’s no big save button on this page. Every change saves the instant you make it:

• Flipping a permission toggle → small spinner appears next to the role name → green tick for two seconds when done
• Renaming a role → the dialog closes and the new name appears immediately
• Deleting a role → the role disappears from the list immediately

If something goes wrong, the toggle reverts to its previous state and a red message appears in the relevant dialog. Try again, or check your internet connection.

Common role recipes

A few starting points for typical roles. Tweak to fit how your venue actually works.

Dashboard Roles

General Manager

• All Dashboard permissions on, except possibly Manage Billing (usually reserved for the owner)
• Often combined with the Manager POS role for the same person

Floor Manager / Senior Host

• All Reservations and Floor Plan permissions
• View permissions for Menus, Reports, Guest List
• No Marketing, Billing, or Permissions

Accountant / Bookkeeper

• All Reports permissions (including Export Report Data)
• View Transactions
• View Plans & Invoices
• Nothing else

Read‑only Owner

• Every View permission on, no Manage permissions
• Useful for an investor or silent partner who wants to see numbers but not touch settings

POS Roles

Manager

• All POS permissions on
• Can Override: on

Server

• Take Orders
• View Payments
• Apply Preset Discounts
• Toggle 86 (Out of Stock) (optional — depends on your venue)

Bartender

• Take Orders
• View Payments
• Apply Preset Discounts
• Toggle 86 (Out of Stock)

Runner

• Almost nothing — just whatever’s needed for them to clock in and see their tables. Often just Take Orders is enough

Kitchen

• Toggle 86 (Out of Stock)
• Nothing else — kitchen staff usually only need to mark items unavailable

Quick recap — the moves you’ll do most

• Add a new dashboard role → Dashboard Roles tab → Add Role → name it → expand and turn on the right permissions
• Stop servers comping drinks → POS Roles tab → expand Server → switch off Apply Custom Discounts
• Let a host edit reservations only → Dashboard Roles tab → expand the role → leave only Reservations permissions on
• Make a manager able to override anything on the iPad → POS Roles tab → expand the role → flip Can Override on
• Rename a role → tap the pencil icon → change the name → Save
• Delete a role → reassign people in Users first → then trash icon → Delete Role

Next steps

• Users — assign your dashboard users and floor staff to the roles you’ve built here
• Discount Presets — work hand‑in‑hand with the Apply Preset Discounts permission
• Devices — register the iPads your POS staff will sign into
• POS Settings — see how POS staff sign in with their PIN and which actions trigger the Can Override prompt