Skip to main content

Custom roles and permissions [Beta]

How custom roles work in the Roles & Permissions beta: starter roles, location scoping, overrides, sensitive permissions and what's new compared with standard permissions.

Written by Sasha Lucinschi

Beta: custom roles are live for a small number of early-adopter brands. You have custom roles if you see Roles & Permissions in your brand settings. If you don't, your brand uses standard permissions. See Permissions in Nory instead.

What's different with custom roles

With custom roles, you set up access once on a role and give that role to people, instead of switching permissions on for each person.

  • Roles named after your jobs: create roles such as GM, Head Chef or Area Manager, or start from Nory's starter roles.

  • View and edit are separate: for example, someone can view wages without being able to edit them.

  • Location scoping: a role can apply brand-wide, at chosen locations, or to a location or franchise group. Groups update automatically when you open new sites. A person can have different roles at different locations.

  • Overrides: add or remove a single permission for one person without creating a new role.

  • Permissions preview: each employee's page shows exactly what they can do, and where.

Starter roles

Your brand starts with these roles. You can rename and edit them, or create your own.

Role

Who it's for

Admin

Full access to everything. You can rename this role, but you can't change its permissions.

Area Manager

Multi-site operations across schedules, people, inventory and performance

Location Manager

Running a single site, including ordering and stock

People Ops

Workforce and people operations, with no inventory access

Inventory Manager

Full inventory access, with no scheduling or people access

Shift Manager

Running the floor, timecards and stock movements

Stock Controller

Counts, deliveries, credits, invoices and inventory reports

Supervisor

Shift leads, with basic ordering and waste

Stock Counter

Stock counts only

Employee

The staff app only, with no access to the management dashboard

Supervisor, Shift Manager, Location Manager and Area Manager build on each other. Each one includes everything in the role below it, so moving someone up only ever adds access.

Once your starter roles are created, they belong to your brand. If Nory later changes its templates, your roles stay as they are.

Wages, payroll and other sensitive information

Sensitive information is switched off by default. Apart from Admin, no starter role includes:

  • wages

  • payroll information

  • tips

  • employee documents

  • exporting employee data

This is the biggest change from standard permissions. If a manager needs to see wages, add the permission to their role or give them an override.

When you switch on a sensitive permission, you also choose whose information it covers:

  • All staff at the role's locations

  • All except own managers: everyone apart from the person's own managers and anyone above them

  • Reporting line only: just the people who report to them

The last two options only work if reporting lines are switched on for your brand. Without reporting lines, the permission covers all staff.

Permissions that are new or work differently

Some actions that standard permissions gave automatically, based on someone's level, now have their own permission.

In standard permissions this was...

Now a separate permission

Available to everyone except Employees

Access the management dashboard, view Insights, edit Insights settings, edit sales forecast, edit clocking rules, manage the clock-in kiosk, deactivate users, view feedback notes, add feedback notes

Admin only

Delete any feedback note, compliance settings, timecard automation settings, location attributes, brand settings, public API keys, weekly labour target, opening hours, cost of labour contribution rules

Admin and Location Manager only

Manage onboarding documents

Part of a wider permission

View wages (separate from editing wages), unapprove timecards (separate from approving), holiday policy (separate from holiday entitlements), assign POS IDs (separate from editing inventory items)

Not available

Edit permission roles, grant any permission, approve all holiday requests (not only the ones where you are the named approver)

Moving to custom roles

Custom roles are being rolled out to early-adopter brands first. Contact Support to switch your brand over to custom roles if you want to be an early adopter.

Still can't access something?

  • Open the person's page and check the permissions preview to see what they can do and where.

  • Check the role is given at the right location or location group.

  • Check whether an override removes the permission for that person.

  • For wages, payroll or personal information, check which staff the permission covers.

  • Ask them to log out of Nory and log back in.

If it still doesn't work, contact Support with the person's name, their role, the location and what they are trying to do.

Did this answer your question?