Skip to main content
Vori uses role-based access control to manage what each team member can see and do in the back office and mobile app. Every user is assigned one or more roles, and each role grants access to a specific set of tasks — from placing purchase orders to managing pricing and promotions. This guide explains the roles Vori provides out of the box (“Vori-managed roles”) so you can assign the right access to the right people.

​
How roles work

Roles are scoped to one of two levels:
  • Banner-level roles apply across your entire banner (all stores under your organization).
  • Store-level roles apply only to the specific store the user is assigned to.
A user can hold multiple roles at once. Some roles (like Reporting and Agent Chats, described below) are designed to be “add-ons” — stacked on top of a primary role rather than used alone. To manage these resources, assign the user a role at banner-level scope rather than store-level scope. Resources that are banner-scoped only:
  • Gift cards
  • Loyalty bonuses
  • Loyalty campaigns
  • Loyalty rewards
  • Notification templates
  • POS orders
  • Shoppers
  • Shopper tags

​
Choosing the right role

A few guidelines when assigning roles to your team:
  • Match the role to the job, not the person’s seniority. A cashier lead should get Front-End Manager, not Store Admin.
  • Use Store Admin sparingly. It grants unrestricted access to everything at that store — reserve it for general managers or ownership.
  • Stack add-on roles as needed. Reporting and Agent Chats are meant to layer on top of a primary role (e.g., a Pricing Manager who also needs reporting access).
  • Third-party accountants should get the Accountant role, not Pricing Manager or Store Admin — it limits access to only invoices, reporting, and GL code mappings.

​
Vori-managed roles

​
Custom roles

In addition to the Vori-managed roles above, you can create your own custom roles from the back office at Users → Roles. Custom roles let you mix and match permissions to match your team’s exact workflow — for example, a role that combines purchasing and inventory access without granting full Store Admin privileges. With custom roles you can:
  • Create a new role with a name, description, and a hand-picked set of resource:action permissions.
  • Choose the scope — banner-level (applies across all stores) or store-level (applies per store). Scope is locked after creation.
  • Edit or delete custom roles. A role has to have no users assigned to it before it can be deleted.
  • Duplicate a Vori-managed role as a starting point and then trim or extend its permissions.
Anyone on your team can view the role list — no special permission is needed to see which roles exist. Creating, editing, and deleting custom roles requires the roles:create, roles:update, and roles:delete permissions respectively. Custom roles are being rolled out banner by banner. If you don’t see Users → Roles in the back office, contact your Vori representative to have it turned on for your banner.
The Vori-managed roles listed above are maintained centrally by Vori and cannot be edited. Once custom roles are enabled for your banner, you can create your own directly in the back office under Users → Roles, with a set of permissions tailored to your team’s needs.

Related topics

Manage Users and Roles in Back OfficeSet Up Cashiers and ManagersFrequently Asked Questions