Skip to content
  1. Hospitality franchise management software
  2. Permissions

Permissions · Orbit OS by Operator Systems · stores it runs

Manage who sees and does what, across owners and stores

Roles and permissions in Orbit OS follow the business, the location and the person. Head office, franchisee, manager and staff each see exactly what their role allows, the checks run on the server, and every change is written to an audit feed the owner can read.

The Roles and permissions console in Orbit OS for a demo business, listing the roles and the permissions each grants

Roles and permissions. Demo business with fictional names.

The problem

A regional manager needs two stores, a bookkeeper needs pay and nothing else, and a new admin should not be able to see the network yet.

What head office sees

Every role with what it allows, every person with their access at the business or at one location, and an audit feed of permission changes.

What it can do

Changes what a role can see or do, scopes a person to one location, grants or withholds wage, revenue and Franchise-view access, and reads who changed what.

The outcome

Access matches responsibility, and the sensitive doors — pay, personal details, the network — open only for the people meant to hold them.

Who does what

Head office sets it. The store runs it.

What head office controls

  • Defines what each role can see and do — including who may see wages or revenue and who may open the Franchise view.
  • Grants a person access business-wide or at a single location, not everywhere by default.
  • Reads every permission change in an audit feed only the owner can open.

What the franchisee and their managers get

  • Runs the store with the role they were given; a manager can be limited to their own store.
  • Sets roles and access for their own people, in their own workspace; head office cannot grant anyone anything inside it.
  • Staff use the phone apps; the web app is for owners, admins and managers.

The workflow

How it works, step by step.

  1. Start from roles

    Owner, admin, franchisee, regional manager, store manager, supervisor and staff come with sensible defaults. Change what a role can see or do once, for everyone in it.

  2. Adjust per person

    A person’s access is set business-wide or at a single location. Someone who manages two of five stores sees two.

  3. Gate the sensitive doors

    Wages, personal details and payroll are separate permissions, checked on the server on every read — not hidden in the interface.

  4. Read the audit feed

    Who changed which permission, for whom, when. The owner reads it; nobody edits it.

Questions

Asked before a demo.

  • Can a franchise admin see the whole network?

    Administrators hold the Franchise view by default; the owner can switch it off for a role or one person. Store managers never hold it.

Orbit OS by Operator Systems

See it on your own network.

Book a demo