Default User Role Permissions
Context
The Management Center is a front-end application that will manage all content, configurations, and reporting related to the PAR Ordering Ecosystem of products. Starting with a flexible authorization system, you will be able to manage roles and permissions in your projects. The Loyalty solution will be managed here first, with many more features coming shortly.
The existing PAR Ordering CMS will be gradually migrated to the new Management Center to enable complete management of the ecosystem through a single application soon.
Roles & Permissions
The Management Center will be used for multiple services across digital order & pay, discounting, Loyalty, and PAR Ordering's own CRM. Therefore, it is important to have a flexible authorization system for managing roles and permissions across services.
There are three predefined Roles that a User can be assigned (in the hierarchical role, given the scope of these permissions):
- Brand Manager
- Area Manager
- Store Manager
Each role has a set of individual permissions that specify what actions or features the User with a certain role can access. There is also a possibility to create custom roles by the User with such permission.
Permission levels that a User can be assigned include:
- Can edit
- Can view
- No access
| Permission Group Name | Name | Brand Manager | Area Manager | Store Manager | Catering Manager |
|---|---|---|---|---|---|
| Configurations | Users | CAN EDIT | CAN EDIT | NO ACCESS | NO ACCESS |
| Configurations | Roles | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Dynamic links | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Update legal agreements | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Cookie Handling | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Activity logs | CAN VIEW | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Discount cards | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Assigned stores | CAN VIEW | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | POS Configurations | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | SSO Management | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | General | CAN EDIT | CAN VIEW | CAN EDIT | NO ACCESS |
| Configurations | Opening hours | CAN EDIT | CAN VIEW | CAN EDIT | CAN EDIT |
| Configurations | Order types | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Configurations | Store tax configuration | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Configurations | Store groups | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Price groups | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Display | NO ACCESS | CAN VIEW | CAN VIEW | NO ACCESS |
| Configurations | Report recipients | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Configurations | Monitoring | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Configurations | Countries | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Currencies | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Applications | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | POS Windows services | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Kiosk window service | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Branding configuration settings | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Customer configurations | CAN EDIT | NO ACCESS | NO ACCESS | CAN EDIT |
| Configurations | Communication channels | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Payments | CAN EDIT | NO ACCESS | CAN EDIT | CAN EDIT |
| Configurations | Store locations | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Tablets | CAN EDIT | CAN VIEW | CAN VIEW | CAN VIEW |
| Configurations | Elasticsearch credentials | CAN VIEW | CAN VIEW | CAN VIEW | CAN VIEW |
| Configurations | Product enablement | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Force updates | CAN VIEW | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Brand tax configuration | CAN EDIT | CAN VIEW | CAN VIEW | CAN EDIT |
| Configurations | Demographic data | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Area | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Order type - Brand | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Delivery areas map | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Delivery fee | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Foodspot | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Manual input | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Serving time | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Singular point | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Table | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Configurations | Brand settings | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | Store settings | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Configurations | Gift cards | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Configurations | application_settings | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Loyalty | Loyalty | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Loyalty | Rewards | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Loyalty | Earning Rules | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Translations | Translations | CAN EDIT | CAN VIEW | CAN VIEW | NO ACCESS |
| Offers | Referrals | CAN EDIT | NO ACCESS | NO ACCESS | CAN EDIT |
| Offers | Coupons | CAN EDIT | NO ACCESS | NO ACCESS | CAN EDIT |
| Offers | Promotions | CAN EDIT | NO ACCESS | NO ACCESS | CAN EDIT |
| Analytics | Brand Analytics | CAN VIEW | CAN VIEW | NO ACCESS | NO ACCESS |
| Analytics | Store Analytics | CAN VIEW | CAN VIEW | CAN VIEW | CAN VIEW |
| Analytics | Data Pipelines | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Analytics | Data Export | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Delivery | DSP Management | CAN EDIT | CAN VIEW | CAN VIEW | CAN VIEW |
| Delivery | Delivery Hub - Dispatching Screen | CAN EDIT | CAN VIEW | CAN VIEW | CAN VIEW |
| Delivery | Delivery Hub - Settings | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Menu - v1 | Brand Menu | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Menu - v1 | Store Menu | CAN EDIT | CAN EDIT | CAN EDIT | CAN VIEW |
| Menu - v1 | POS Mapping | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Link | External Channel Partners | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Link | Link status - Brand | CAN VIEW | NO ACCESS | NO ACCESS | NO ACCESS |
| Link | Link status - Store | CAN VIEW | CAN VIEW | CAN VIEW | CAN VIEW |
| Marketing | News | CAN EDIT | CAN VIEW | NO ACCESS | NO ACCESS |
| Orders | List of Orders | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Orders | Refunds | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Orders | Order error logs | CAN VIEW | NO ACCESS | NO ACCESS | NO ACCESS |
| Customers | List of Customers | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Capacity Management | Capacity management -Brand | CAN EDIT | CAN VIEW | CAN VIEW | CAN VIEW |
| Capacity Management | Capacity management - Store | CAN EDIT | CAN VIEW | NO ACCESS | CAN EDIT |
| Capacity Management | Preparation time strategy - Brand | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Capacity Management | Preparation time strategy - Store | CAN EDIT | CAN EDIT | CAN EDIT | CAN VIEW |
| Menu v2 | Menu - Brand | CAN EDIT | NO ACCESS | CAN VIEW | CAN VIEW |
| Menu v2 | Menu - Store | CAN EDIT | CAN EDIT | CAN EDIT | CAN EDIT |
| Order Desk | Create Orders | CAN VIEW | CAN VIEW | CAN EDIT | CAN EDIT |
| Payments | Payment Processor | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
| Payments | Brand Payment Methods | CAN EDIT | NO ACCESS | NO ACCESS | NO ACCESS |
| Payments | Store Payment Methods | CAN VIEW | CAN VIEW | NO ACCESS | NO ACCESS |
| Payments | BIN Ranges | NO ACCESS | NO ACCESS | NO ACCESS | NO ACCESS |
Please note: The above information will be updated when all features are migrated.
In addition to a role, a User can also be assigned access to specific Brands and/or Stores. This determines what data is available for reporting and what Brand/Stores specific configurations are accessible from individual features.
This can be configured via Store Groups, or by selecting specific Brands and/or Stores.
If you want to learn more - here's the additional information about Intro to BMM (Brand Menu Management) & Store Groups.
