Team and staff permissions

What it is

You (the admin) can do everything. Staff can do nothing until you tick permissions — "See orders", "Fulfil orders", "Edit the catalogue", and so on. Some things can never be given to staff: payment keys, API keys, the WhatsApp connection, refunds, the team page, settings.

Steps

1. Settings → Team (unlock the admin vault with your PIN when asked).
2. Invite staff: by email or by phone (WhatsApp sign-in), name, tick permissions, Send invitation. The link works for 7 days.
3. Change ticks any time and Save — it applies on their next click. Remove ends their access at once.

Common mistakes

• Inviting with nothing ticked: they can sign in but every page says which permission it needs — fine as a first step.
• "Edit the catalogue" includes Inventory, Listing health and Brands.