Settings › Users and permissions. Owners can do everything (a store always keeps at least one). Everybody else has a role, if you like a few extra permissions, and can be limited to some couriers and sales channels.
Roles
Ready-made: Manager (everything except paying, changing the plan and deleting couriers), Dispatcher (log and scan), Booker (book and print labels), Claims agent, Viewer. Edit them or make your own with + New role; changing a role changes everybody who has it.
Permissions
| Group | Permissions |
|---|---|
| Orders | View dashboard & search · Log dispatches · Log returns · Bulk upload · Change status & tracking · Edit & delete batches |
| Booking | View · Book · Cancel · Print labels |
| Claims | View · Create & edit · Send emails · Mark settled · Delete attachments |
| Records | Activity log · Download & export · Backup & restore |
| Couriers & channels | View setup · Add & edit · Edit API keys · Delete · Run tests |
| Store | Order rules & cities · Email settings · Team: invite · Team: approve & change permissions · Plan: view · Plan: pay & change |
Courier scope
In Edit access, tick couriers to limit someone to them (none ticked = all). A TCS-only dispatcher logs everything as TCS, sees only TCS on the dashboard and the Book page, and cannot log another courier's parcels.
Access requests
- Someone without access (or wanting more) opens their Profile, picks a role and/or permissions, writes why, and sends it.
- Everybody who may approve gets an email, and the request appears at the top of this page.
- Choose Approve as asked, Approve with changes… or Decline… (with a reason). They are emailed either way.
Safety rules
- Nobody changes their own access; ask another owner.
- Only owners make owners, change owners or remove them; the last owner cannot be removed.
- Managers can only hand out permissions they have themselves.
Inviting, passwords and leavers
Invite someone: their email, a role (or "No access yet") and optionally couriers. The link works 7 days, once. Set password gives someone a new password; Remove deletes the login - what they logged stays. "Let people sign up with my store code" allows self sign-up with no access; they then ask for what they need.