# Roles and access

<https://kuvert.dk/en/dokumentation/roller>

Staff must be able to redeem a gift card and take a table booking. They must not be able to change prices, issue cards or see the whole business's figures, and the bookkeeper must not see guests' allergies. That's why access is split into four.

## The four roles

| Role | What the role is for |
| --- | --- |
| Owner | The whole shop: products, prices, money, setup and the API. The only role that can invite and remove colleagues. |
| Manager | The day-to-day manager. Runs the counter, the evening's guests, the range and the table booking setup, but touches neither money, Stripe, API keys nor the team. |
| Staff | The person at the counter and on the door. Can take orders and see what has been sold, but cannot change prices, issue cards or move money. |
| Accountant | The person who keeps the books. Can see every sale and export everything for the auditor, but touches neither the counter nor the range. |

Staff can undo a redemption they just made without asking anyone. That's intentional: the alternative is that a DKK 400 mistake instead of 40 has to wait for the owner, and in the meantime gets resolved with a free card. The undo is in the card's history with the name of who made it.

> **Important:** Don't give staff the owner role because it's faster. The owner role can move payout arrangements and create API keys. If someone needs to look after the range or the table booking setup, that's the manager role.

## Invite a colleague

1. Go to Settings → Team.
2. Invite by email address and choose the role.
3. The colleague sets their own password at first login.

## When someone leaves

Remove access from the Team overview. The history of what they have redeemed stays, because the entries belong to the cards and not to the user.