Chapter 10 — Users and roles (Benutzer)

In this chapter: defining staff roles and permissions, and managing customer records.

10-1. Roles (Rolle)

Every member of staff has a role, and the role determines which pages and buttons they see:

1. Create a new role and give it a name (for example "Cashier", "Warehouse staff", "Branch manager").
2. Tick the permissions — permissions are granular: view, create, edit and delete separately for each section.
3. Save it and assign the role to users.

Notes:

• No "view" permission → that menu is not displayed at all. No write permission → the page becomes read-only.
• Principle of least privilege: give each role only what it needs for its job; keep delete, refund and settings especially restricted.
• After a role change, the user sees the changes with a single log out/log in.

10-2. Customers (Kunde)

The complete customer database (shared between the site and the point of sale):

• A list with search and filter; create and edit customers.
• Customer record:
• Account information: name, email, phone, tax number, gender, date of birth, language and time zone. (The company name is an address field, not account information.)
• Addresses: add/edit/delete, set the default delivery and billing address.
• Orders: the complete history plus statistics (average order value, first and last purchase).
• Password management: set/reset the customer's site login password.

💡 A customer's store credit and gift card can be managed from the point of sale (point-of-sale guide, Chapter 8) and the sales section.