- Hospitality franchise management software
- Permissions
Permissions · Orbit OS by Operator Systems · stores it runs
Manage who sees and does what, across owners and stores
Roles and permissions in Orbit OS follow the business, the location and the person. Head office, franchisee, manager and staff each see exactly what their role allows, the checks run on the server, and every change is written to an audit feed the owner can read.

Roles and permissions. Demo business with fictional names.
A regional manager needs two stores, a bookkeeper needs pay and nothing else, and a new admin should not be able to see the network yet.
Every role with what it allows, every person with their access at the business or at one location, and an audit feed of permission changes.
Changes what a role can see or do, scopes a person to one location, grants or withholds wage, revenue and Franchise-view access, and reads who changed what.
Access matches responsibility, and the sensitive doors — pay, personal details, the network — open only for the people meant to hold them.
Who does what
Head office sets it. The store runs it.
What head office controls
- Defines what each role can see and do — including who may see wages or revenue and who may open the Franchise view.
- Grants a person access business-wide or at a single location, not everywhere by default.
- Reads every permission change in an audit feed only the owner can open.
What the franchisee and their managers get
- Runs the store with the role they were given; a manager can be limited to their own store.
- Sets roles and access for their own people, in their own workspace; head office cannot grant anyone anything inside it.
- Staff use the phone apps; the web app is for owners, admins and managers.
The workflow
How it works, step by step.
- 1Start from roles
Owner, admin, franchisee, regional manager, store manager, supervisor and staff come with sensible defaults. Change what a role can see or do once, for everyone in it.
- 2Adjust per person
A person’s access is set business-wide or at a single location. Someone who manages two of five stores sees two.
- 3Gate the sensitive doors
Wages, personal details and payroll are separate permissions, checked on the server on every read — not hidden in the interface.
- 4Read the audit feed
Who changed which permission, for whom, when. The owner reads it; nobody edits it.
Questions
Asked before a demo.
Can a franchise admin see the whole network?
Administrators hold the Franchise view by default; the owner can switch it off for a role or one person. Store managers never hold it.
More head-office controls
The other six.
Orbit OS by Operator Systems