Who can see what

You're about to give the new front-desk hire a login, and the honest question is: what will they be able to see? Not "what does the permission table say" — what will actually open when they tap it.

There are five roles. Four of them are in this picker; the fifth is Owner, which is you, and which nobody can be handed.

What each one reaches

Manager is everything except four things: setting anybody's pay, running a pay period, changing who can sign in, and the account-level settings that could close the business. A manager can read what people are paid; they can't change it. In practice this is the role for whoever runs the floor when you're not there.

Front desk is the till and the diary. Calendar, clients, checkout, the cash drawer, gift cards, memberships and packages, plus the whole shared inbox. They can see the non-money reports and not the money ones, and payroll, staff and your settings aren't in their menu at all.

Stylist is the calendar, clients and checkout, their own inbox threads, and clocking in and out. No cash drawer, no gift cards, no memberships, no team settings.

Read-only is a spectator: the calendar, the client list, and the non-financial reports. It changes nothing, anywhere. Note what that excludes — every report with money in it — so it is the wrong role for a bookkeeper and the right one for someone who just needs to see the diary.

The thing to know before you choose

A role decides which screens someone can open, not which rows they see inside them.

That is the single most important sentence on this page, because it's the one people assume the other way round. A stylist who opens the calendar sees the whole salon's day, not just their own column. A stylist who opens Clients sees every client you have, with their contact details and their history.

The inbox is the one place where "yours" is real: a stylist sees the threads they're part of and nothing else, while front desk and managers see all of them.

So if the reason you're reaching for a restrictive role is "I don't want them seeing everyone's clients", no role does that. What the roles genuinely protect is money, payroll, your team's pay, and the settings that run the business.

Changing somebody's role

The staff table is who works here. Who can sign in, just above it, is who holds keys — a shorter list, and the one where roles live.

Two rows won't offer you a picker. Your own, so you can't quietly lock yourself out of your own business, and the owner's, because there is exactly one owner and transferring a salon isn't something the product does. Both show their role as a plain badge instead of a disabled control that would only raise the question.

Managers see this whole section, and see everybody's role, but not the picker or Remove access — deciding who holds keys stays with the owner.