Skip to main content
Vori uses role-based access control to manage what each team member can see and do in the back office and mobile app. Every user is assigned one or more roles, and each role grants access to a specific set of tasks — from placing purchase orders to managing pricing and promotions. This guide explains the roles Vori provides out of the box (“Vori-managed roles”) so you can assign the right access to the right people.

How roles work

Roles are scoped to one of two levels:
  • Banner-level roles apply across your entire banner (all stores under your organization).
  • Store-level roles apply only to the specific store the user is assigned to.
A user can hold multiple roles at once. Some roles (like Reporting and Agent Chats, described below) are designed to be “add-ons” — stacked on top of a primary role rather than used alone.

Choosing the right role

A few guidelines when assigning roles to your team:
  • Match the role to the job, not the person’s seniority. A cashier lead should get Front-End Manager, not Store Admin.
  • Use Store Admin sparingly. It grants unrestricted access to everything at that store — reserve it for general managers or ownership.
  • Stack add-on roles as needed. Reporting and Agent Chats are meant to layer on top of a primary role (e.g., a Pricing Manager who also needs reporting access).
  • Third-party accountants should get the Accountant role, not Pricing Manager or Store Admin — it limits access to only invoices, reporting, and GL code mappings.

Vori-managed roles

NameDescriptionPermissions
Banner AdminScope: Banner-wide
Administrator that can take any action on any resource owned by the banner. Reserve for banner-level leadership or IT administrators.
*:*
Store AdminScope: Store-level
Administrator that can take any action on any resource owned by the store. Equivalent to Banner Admin but limited to one store.
*:*
Order ClerkPlaces purchase orders against vendors you already work with. Can view vendor lists, product catalog, and current inventory, but cannot create new vendors or edit the catalog.inventory:read
inventory_sessions:read
products:read
purchase_orders:*
store_vendors:read
vendors:read
Receiving ClerkHandles deliveries at the loading dock: receiving shipments, updating inventory, and capturing vendor invoices. Can view (but not create) purchase orders and vendor records.inventory:*
inventory_sessions:*
invoices:create
invoices:read
products:read
purchase_orders:read
receiving:*
store_vendors:read
vendors:read
BuyerOwns sourcing end-to-end: onboarding new vendors, adding new products, and managing purchase orders. Full control over the product catalog, store-specific product rules, product ranges, and variable-weight item setup. Can also view and update receiving and invoice records.departments:read
food_modifiers:read
inventory:read
inventory_sessions:read
invoices:create
invoices:read
invoices:update
item_modifiers:read
product_ranges:*
products:*
purchase_orders:*
receiving:create
receiving:read
receiving:update
store_product_rules:*
store_vendors:*
tax_rates:read
variable_weights:*
vendors:*
wic_products:read
Pricing ManagerOwns the catalog, retail pricing, promotions, and invoices for a store. Full control over products, departments, tax rates, item and food modifiers, promotions, offers, discounts, coupons, price tags, and tag templates. Can also manage invoices and view vendor information.coupons:*
custom_quick_actions:read
departments:*
discounts:*
food_modifiers:*
invoices:*
item_modifiers:*
offers:*
price_tags:*
product_ranges:*
products:*
promotions:*
store_product_rules:*
store_vendors:read
tag_templates:*
tax_rates:*
variable_weights:*
vendors:read
Pricing ClerkHandles day-to-day pricing and product work without access to store-level configuration settings. Full control over products, product ranges, promotions, offers, discounts, coupons, and price tags, but only read access to departments, tax rates, modifiers, and vendors.coupons:*
departments:read
discounts:*
food_modifiers:read
item_modifiers:read
offers:*
price_tags:*
product_ranges:*
products:*
promotions:*
store_vendors:read
tag_templates:*
tax_rates:read
variable_weights:*
vendors:read
wic_products:read
AccountantReviews invoices and financial reporting — often assigned to a third-party bookkeeper or accountant, so it grants the least trust of any role that touches invoices. Full access to reporting, invoices, and general ledger code mappings only.gl_code_mappings:*
invoices:*
reporting:*
Marketing ManagerScope: Banner-wide
Runs loyalty programs, marketing campaigns, and shopper engagement. Full control over loyalty bonuses, campaigns, rewards, notification templates, shoppers, and shopper tags. Can view (but not edit) offers, products, and coupons.
coupons:read
loyalty_bonuses:*
loyalty_campaigns:*
loyalty_rewards:*
notification_templates:*
offers:read
products:read
shopper_tags:*
shoppers:*
Front-End ManagerManages the checkout experience: cashiers, tills, and lanes. Full control over point-of-sale orders, tills, employees, and custom quick actions. Can restart, update, and view lanes, and has read-only access to products, departments, and POS banner configuration.custom_quick_actions:*
departments:read
employees:*
lanes:read
lanes:restart
lanes:update
pos_banner_configurations:read
pos_orders:*
pos_tills:*
products:read
ReportingRead-only access to analytics and reporting. Add-on role, meant to be added on top of another role rather than assigned by itself.reporting:*
Agent ChatsGrants access to Chip, Vori’s AI assistant. Add-on role, meant to be stacked on top of a primary role rather than assigned alone.agent_chats:*
Role definitions and the specific permissions each role grants are maintained centrally by Vori. If your team needs a custom role or a permission combination not covered by the roles above, contact your Vori representative.