Last updated: Feb 4, 2026, 4:35 PM
Each access permission that is available for your Toast Point of Sale (POS) or in Toast Web grants access to a system feature, such as an option on a Toast POS device, a type of report to run, or a configuration change to make. This article summarizes the available access permissions.
| For more details about each permission, including who it should be assigned to, check out the access permissions reference in the Toast Platform Guide. |
Typically, you don't assign access permissions to individual employees. Instead, you group a set of access permissions into a job and then assign the job to the employees who need to use the corresponding feature set.
Note: To set up jobs, you must have the Employee Jobs & Wages access permission and credentials to access Toast Web.
To assign an access permission to an individual employee, you must have the User Permissions access permission. In addition, you must have any given access permission in order to include it in a job or assign it to an employee
After assigning a permission, be sure to reboot the device that the permission applies to in order for the permission to function properly.
This system functions as a more straightforward permission allowance than having employees enter a manager-provided code each time they would like to perform one of the actions allowed by the various permissions.
For more information about how to set up jobs and assign permissions to them, check out these other Toast Central resources:
Every employee who has a passcode can sign in to a Toast POS device to access the clock-in/out screen for time entry, but to use Toast POS devices for any other tasks, employees must have POS access permissions which give them the ability to use the main modes, or functions, of the Toast POS device. Employees must have one or more of the following mode permissions:
POS Access
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
Note: Delivery Mode is also a mode permission with characteristics similar to the permissions described in this section. For more information about permissions relating to delivery tasks, see the section of this article.
All of the mode permissions also provide access to the following sections and options on the Toast POS home screen.
Employees who have a mode permission and who also have credentials to access the Toast back-end can access their own user account information only, and can update that information as needed (including their email address, employee ID, and passcode). To complete any other tasks in Toast Web, additional access permissions are required.
The remaining POS access permissions can be assigned, along with one or more of the mode permissions mentioned above, to provide access to the other options and features available on Toast POS devices. Cash drawer permissions can also be assigned to non-POS users, such as accountants, as needed. In all, these POS permissions include:
POS Access
|
|
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
The delivery access permissions described in this section give employees access to features used to complete delivery orders.
Delivery Access
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
| Toast Delivery Services users will need all delivery permissions in order to utilize TDS features. See the table below for a description of how each permission impacts the TDS workflow. |
| Permission | Toast Delivery Services (TDS) Function |
| 2.2 Update All Delivery Orders | Grants employees the ability to dispatch delivery orders to any delivery driver and update the status of all delivery orders assuming the delivery functions are permissible. |
| 2.3 Dispatch Driver | Dispatch driver assigns a driver to an unassigned delivery order and updates it to an en-route order. |
| 2.4 Cancel Dispatch | Cancel dispatch reverts an en-route delivery order back to an unassigned delivery order. |
| 2.5 Complete Delivery | Complete delivery updates an en-route order into a delivered order. |
| 2.6 Update Driver | Update driver will allow the employee to change the driver assigned to a completed delivery order. |
Manager access permissions can be assigned, along with one or more of the mode permissions, to provide access to options and features on Toast POS devices that entail greater responsibility. Some of these features also require user credentials to access Toast Web.
Manager
|
|
|
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
Note: Any user with any of the 3. Manager permissions will have the ability to add special requests to orders on the POS.
To provide access to restaurant-wide reporting and configuration options for your Toast POS system, you can assign one or more of these restaurant admin access permissions. In most cases, these reporting and configuration features require that employees have credentials to access Toast Web.
Restaurant Admin
|
|
|
The 4.13 Customer Credits & Reports permission, as well as access to the entire restaurant management group, is needed for users wishing to access the .
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
Assign one or more of these quick edit access permissions to your managers or employees to allow them to '86 an item, change prices, or add/remove menu items on the fly.
Quick Edit Access
|
|
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
Assign one or more of these web setup access permissions to owners and managers who are responsible for creating discounts, managing kitchen and payment settings, setting up taxes, and publishing configuration changes to all devices in the restaurant. In all cases, these configuration features require that employees have credentials to access Toast Web.
Web Setup
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
Assign one or more of these device setup access permissions to owners and managers who are responsible for configuring fundamental device-specific options.
Note: Some device setup options are available only after a feature is enabled in Toast Web, or rely on an optional service or module.
Device Setup
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.
Note: Some of the device setup access can be granted through POS Access permissions 1.1-1.5 as well (). The Setup > Device Setup options available to users with those POS Access permissions include:
|
|
|
To provide access to sensitive or specialized information for your Toast POS system, you can assign one or more of these account admin access permissions. Employees who have any of these permissions must also have credentials to access Toast Web.
Account Admin
Notes:
For more details about each permission, including who it should be assigned to, check out the in the Toast Platform Guide.