When to bring on staff — and how to manage access

The moment someone other than you is taking payments or touching stock, the question isn't just "can I trust them" — it's "does the system make honesty the easy default." Good access control protects staff as much as it protects you.

Give roles, not blanket access

A cashier needs to sell and take payment — not see full financial reports or change prices. A manager needs oversight — not necessarily the ability to delete records. Matching access to the actual job removes both temptation and honest mistakes.

• Start every new hire with the narrowest role that lets them do their job.
• Every shift should have a clear open and close, with a recorded total.
• Sensitive actions — refunds, deletions, discounts — should be visible to a manager, not silent.

StoreDrop's roles (owner, admin, staff, cashier, viewer) and shift tracking are built around exactly this — so adding your first employee doesn't mean handing over the keys to everything.