Security Rights enable or disable certain employee types from being able to perform particular functions. All personnel must be assigned a Security Group, which restricts all employees in that group to a certain set of predefined functions. Some groups, such as the General Manager, which can't have its rights edited, are built in to the software, but you can also create your own.  The built in groups also enable you to quickly create offsets of groups by copying them and altering only the rights that differ between that group and the original.

Create a Security Group

In the following example we will be creating a Head Cashier security group.

1. From Manager Console, click Maintenance.
2. Double-click Personnel.
3. Double-click Security, which will take you to Security Maintenance.
   
   
   • You can click Add from here to create a Security Group from scratch, but you will likely want to copy an existing group that most closely matches the rights you want to include in the new group.
4. Select the Security Group you want to duplicate from the pull-down.
   • In this example we are copying the Cashier.
     
     
5. Click Copy.
   You could also click Edit if you want to edit the rights for this existing group.
6. Confirm you want to make a copy.
7. Give it a new Group Name, such as "Head Cashier."
8. Enter a Description if necessary.
9. Verify Yes is selected next to Enabled if you want to be able to assign personnel to this group.
   
   There are two views you can use to edit security rights for a new or existing security group. These views are the Simple View and the Advanced View. Using the Simple View, you can expand any of the categories and subcategories to reveal a check box, which will toggle an individual right on or off. A checked security right will be accessible to the security group you are editing.
   Using the Advanced View, you can click on an individual right to bring up advanced security options on the right of the screen, although it is not generally recommended that you use this feature and adjusting the Security Hierarchy is the best way to control who can make edits to security rights. The radio buttons that display include the options None, Execute, Full Control, and Custom. If you select None, the security group will not have the ability to use that security right or change that security right in Security Maintenance. Execute means the security group will be able to use the function but it will not be able to change that security right in Security Maintenance. Full Control means the group will be able to both use the function and change that security right. Custom reveals two check boxes: Execute and Change Security. You can select one or both of these options. Selecting Execute means the group will be able to use the function but it will not be able to change the right. Selecting Change Security means the group will not be able to use the function, but it will be able to change the right. Selecting both gives the user full control of the right.
   • Below these fields is a list of nested folders. You can click the plus icon to expand them and see further categorizations or individual security rights depending on which you open.
10. Click any individual security right to see a description of its purpose at the bottom of the screen.
11. Select or deselect any rights you want this Security Group to have.
    • For this example we want to give the Head Cashier the ability to perform a return.  To find this right, expand Point of Sale > Management.  Select Return.
12. Click OK to save the group.

Security Hierarchy

Security Groups are arranged in a hierarchy, so you can quickly determine which groups have the right to edit the rights for another group.

1. From the Personnel section of Manager Console, double-click Security Hierarchy.
2. Click the security group you want to move.
3. Use the up and down arrows to move it up or down the list.
   • For example, you may not want the Division Supervisor to be able to edit the Division Manager's security rights, so you would make sure to move the Division Manager to a position above the Division Supervisor.
     
4. Click Save when you are done.