Signing in, roles and permissions
- PIN: 4–8 digits on the terminal PIN pad. PIN sign-in works fully offline — staff PINs sync to each device, so load shedding never locks the team out. Each staffer gets a completely fresh session: carts and state never leak between logins.
- Back Office: email + password + tenant id. Sessions refresh silently; if a session truly expires you're asked to sign in again and no work is lost.
- Manager override: when a server triggers a manager-gated action (discount, void, comp, no-sale, Settings, floor editing), a Manager approval required dialog appears — a manager enters their PIN to authorise that single action, and their id is recorded for audit. The server keeps the till.
- Refunds are stricter: the Refund button only exists for managers/admins — there is no override prompt for it.
- Roles: ADMIN, SUPER_ADMIN, MANAGER, SERVER, CASHIER, BARTENDER, CHEF, HOST. See Appendix A.
- Enforcement is server-side. The apps hide some actions by role, but the server is the real gate — a tampered client still can't perform an action its token isn't allowed.
More in Getting started
- 1What runs where
- 2Quick starts
- 3Setting up your restaurant
- 25Running a shop (retail mode)
- 44Products and licensing
Still stuck? Mail support@aurapos.co.za or use the support page — include your venue name and what you were doing.