Team members, roles and permissions
Give employees the operational access they need without exposing sensitive financial or platform settings.
Use least privilege
Create a role around a job function and grant only the required modules. Managers and staff should not see revenue, profit or financial reports unless explicitly permitted.
Manage access lifecycle
Record employee details separately from application users. Disable a user immediately when access is no longer required, while retaining historical audit records.
Protect credentials
Every person should use their own account. Never share store API secrets, passwords or backup files through ordinary messages.