Staff permissions: what your seller sees and what stays hidden

Every seller signs in with their own PIN, and you decide with checkboxes what appears on their screen. Cost price, profit and reports open only if you allow them.

Start 7 days freeNo payment card needed

Why an employee account matters

If the owner simply hands over their phone, the seller sees everything: cost prices, profit, the balance. That is what employee accounts are for — the seller signs in with their own PIN and you decide what their screen contains. A section you do not tick never appears in the app, so nobody taps a button that does nothing.

The Employees section lives in your profile and is open to the owner only. Three places are never granted to staff whatever you tick: the balance (the shop money), the employee list and the referral code.

A permission is not just a hidden button: the server checks it on every request. Take a permission away or block the employee and their app stops at the very next tap.

Adding an employee and the PIN login

The whole thing takes a few minutes. The owner picks the PIN — exactly four digits.

01

Enter a name and a PIN

Profile → Employees → Add employee. The seller’s name and the four-digit PIN you give them — nothing else is asked.

02

Pick a ready-made set

Till only, Seller, Senior seller or Manager (everything). Afterwards you fine-tune each checkbox on the employee’s card.

03

The seller signs in on their own phone

They open the app, tap «Sign in as employee» and type the shop number plus their own PIN. Neither your number nor your Telegram is needed.

What each permission opens

Permissions are grouped into six blocks: till and sales, the credit ledger, customers, stock, suppliers and other sections. Below are the ones shop owners ask about most.

Sell at the till
If granted
The till screen, cart, scanner and receipt
If withheld

The till never appears in the menu

Sell on credit
If granted
The credit payment type appears and the sale writes itself into the debt ledger; finding a customer by phone also needs the «Customer list» permission
If withheld

They can only sell for cash or card

Accept returns
If granted
The returns screen and partial returns from a receipt
If withheld

You handle returns yourself

See the stock list
If granted
The product list, stock levels and selling prices
If withheld

The stock list does not open

Receive goods (intake)
If granted
The intake screen, reading a label from a photo and the shared catalogue
If withheld

The seller cannot book in new stock

Change prices
If granted
The selling price and the discount percentage
If withheld

The price field stays locked

Haggling at the till
If granted
Types the total agreed with the customer; the discount is saved with the sale
If withheld

Cannot lower a price at the till — only the “Manager” set includes it

See the cost price
If granted
Cost, margin and profit are visible
If withheld

Cost is never sent — not to the screen, not into Excel

Reports and profit
If granted
Revenue, profit, expense totals, who sold how much, closed shifts
If withheld

The reports section is not in the menu

Expenses
If granted
Recording, editing and deleting expenses
If withheld

The expenses screen does not open

Shop settings
If granted
Shop name, printer size, report hour
If withheld

Their profile keeps only their name, language and sign-out

Some permissions depend on each other and are added for you: tick «Sell on credit» and «See debts» plus «Record a debt» switch on; tick «Create orders» and the supplier ledger opens. Three of the ready-made sets — Till only, Seller and Senior seller — include neither cost price nor reports; only the Manager set does.

Why a seller should not see the cost price

A seller who knows the cost price is much readier to knock money off — for a friend or for anyone who starts haggling. That is why cost is a separate permission, and without it the cost figure is never sent to that employee at all. Other warning signs are in our article on staff theft.

You still see what happened

Tightening permissions is half the job. The other half is seeing who made each record.

Who sold how much

The report shows revenue, receipt count, average receipt and profit for each seller, with returns subtracted from their result. Your own sales sit on a separate line. Monthly targets and bonuses live in staff KPIs, which only you can see.

Who signed in and when

When a seller signs in you get a Telegram message — you can switch that off if you prefer. The Employees section also keeps a list of recent sign-ins.

If someone guesses at the PIN

After several wrong attempts the login is blocked for a while and a warning reaches you in Telegram.

When someone leaves

Blocking or deleting takes effect at the next tap. The sales, debts and expenses of a deleted employee stay put — old reports are not broken.

Shifts and the cash difference

At the start of the day the seller writes down the cash in the drawer and opens a shift — the bar sits at the top of the till screen. At closing they count the cash, and the app works out what should be there: opening cash + cash sales + debt repayments − cash refunds − expenses paid from the drawer. The difference appears immediately, and when there is one a reason field opens. More on the staff oversight page.

The honest limits, and your questions

There are four things about staff control you should know — we are not hiding them.

Does the seller see cost price and profit?

Without the «See the cost price» permission, no: neither the screen nor the Excel file carries cost or profit. But with «Reports and profit» they will see the shop’s overall profit and expense totals even without knowing any single item’s cost.

Who knows the PIN?

You set the PIN and you can see it on the employee card — it is stored in the clear. Repeated wrong entries block the login for a while and send you a Telegram message. When a seller leaves, block or delete their account.

What if the seller hands out a discount at the till?

Only if you allow it. Haggling at the till — typing an agreed lower total for the customer — is its own permission (“Haggling at the till”): no ready-made set except “Manager” includes it, and every discount given is recorded with the sale. A discount on the product card depends on the “Change prices” permission, and discounting through the AI needs the same one.

Is there an extra charge per employee?

No. However many sellers you have, the price stays the same — billing depends on the shop type, not on the number of staff.

What if two sellers work at once?

Both sign in with their own PINs and every sale is stored with the seller’s name. But a shop has just one open shift: a second one cannot be opened, so the cash count stays shared.

Prepared by: the BuySale team · Spotted a mistake? Tell us on Telegram

Related pages

BuySale

Try it today and see the difference tomorrow.

7 days free, no payment card needed. Then from 6 630 UZS a day, depending on the shop type.

Start for free