What Each Role Can Do by Default

Manager

A manager runs a branch. They can book in and edit repairs, sell, raise and send invoices, manage stock and suppliers, raise purchase orders, see their branch's finance figures and reports, and manage the staff in their branch.

• Can: repairs, sales, invoicing, inventory, suppliers, purchase orders, agents, services
• Can: their branch's finance dashboard, expenses, reports and team
• Can: raise and approve a refund, and raise and approve an exchange
• Cannot: pay a refund out, or delete a recorded payment
• Cannot: send or cancel a purchase order, or pay a supplier
• Cannot: open Settings, change the shop, or manage billing

Technician

A technician works on repairs. This is the smallest role by a wide margin, and everything it holds is something the workshop actually needs.

• Can: see and edit the repairs assigned to them
• Can: add and remove parts and labour on a job, and move it forward through the workshop stages
• Can: see device passcodes and unlock patterns, which is needed to do the repair at all
• Can: view the product catalogue and search serial numbers for a warranty check
• Cannot: take a job past Testing, so someone else signs it off
• Cannot: sell, invoice, see finance, or open reports

Cashier

A cashier serves the counter. They handle money coming in, but not money going out.

• Can: use the POS, complete sales, take payments and print receipts
• Can: raise, send and convert invoices and quotations, and record payments against them
• Can: book a repair in, take payment on it, and hand a finished job back to the customer
• Can: raise a refund or an exchange, for someone else to approve
• Cannot: void a sale or an invoice, approve a refund, or edit a repair
• Cannot: see device passcodes, change stock, or open reports

What stays with the owner

Some actions are owner-only by default, and two can never be given away at all. The two that are permanently locked are changing someone's role and erasing shop data, because either one could be used to step around every other permission on the page.

• Locked, cannot ever be granted: changing a person's role, erasing shop data
• Owner-only by default: voiding sales and invoices, paying refunds out, deleting a recorded payment
• Owner-only by default: transfers between accounts, owner drawings, correcting a payment method
• Owner-only by default: all of Settings, billing, connected services, and bulk import

Why refunds and payments are split

A manager can raise a refund and approve it, but not pay it out. A manager can record a payment, but not delete the record of one. This is deliberate: it keeps the person who starts a money movement separate from the person who completes or erases it. In a small shop that can feel like friction, and you are free to grant both to the same role. Fixmo will warn you when a change does that, and record that the risk was accepted.