Permissions Reference Guide

Last updated: May 14, 2026, 10:26 AM

Learn about all of the access permissions that can be assigned to employees for POS and Toast Web access.

What this applies to

Detail

Value

Products

Toast POS, Toast Web

Audience

Restaurant owners, administrators, and managers who assign or review employee access permissions

Prerequisites

Toast Web credentials and the 8.2 User Permissions access permission (to assign permissions to others)

 

Before you begin

Each access permission grants access to a specific feature on the POS, in Toast Web, or both. Permissions are grouped into numbered categories (1.x through 8.x).

 

  • Permissions are typically assigned through jobs (roles), not to individual employees. For step-by-step instructions, see Assign user access permissions.
  • You must have a permission yourself to include it in a job or assign it to an employee. If you try to grant a permission you do not have, you will see an error.
  • After assigning or changing a permission, the employee must sign out and sign back in. On the POS, the device may also need to be rebooted for the change to take effect.
  • If your restaurant group has multiple locations, permissions can be set at the group level or the individual location level. Location-level settings override group-level settings.
  • For more details about each permission, including recommended role assignments, see the access permissions reference in the Toast Platform Guide.

 

In this Article:

 

POS access: Modes

Every employee who has a passcode can sign in to a Toast POS device for time entry. To use the POS for any other tasks, employees need one or more of the following mode permissions. All mode permissions also provide access to My Account > Time Clock, Setup > Device Setup, and the Support section on the POS home screen.

 

Number

Permission name

Description

1.1

Table Service Mode

Grants access to Table Service mode on the POS, used for dine-in table management and order entry.

1.2

Quick Order Mode

Grants access to Quick Order mode on the POS, used for counter-service and quick-service order entry.

1.3

Kitchen Display System Mode

Grants access to Kitchen Display System (KDS) mode on the POS, allowing the employee to view and manage orders on a KDS screen.

1.4

Payment Terminal Mode

Grants access to Payment Terminal mode on the POS, used for processing payments only (no order entry).

1.5

Pending Orders Mode / Orders Hub Mode

Grants access to Orders Hub and Pending Orders mode on the POS, used for managing incoming online, delivery, and takeout orders. Pending Orders mode on the POS is used to view Future Checks (orders scheduled for a future date) and orders that need approval before being fired to the kitchen.

Note: Delivery Mode (2.1) is also a mode permission. See the Delivery access section below.

 

Employees with a mode permission who also have Toast Web credentials can view and update their own user account information (email address, employee ID, passcode). Any other Toast Web tasks require additional access permissions.

 

Back to top

 

Additional POS access

These permissions can be assigned along with one or more mode permissions to give employees access to additional POS features. Cash drawer permissions can also be assigned to non-POS users (such as accountants) as needed.

 

Number

Permission name

Description

1.6

Apply Cash Payments

Allows the employee to accept cash as a payment method on the POS.

1.7

Cash Drawer Access

Allows the employee to open and interact with the cash drawer during transactions on the POS.

1.8

View Other Employees' Orders

Allows the employee to see orders created by other employees on the POS.

1.9

Edit Other Employees' Orders

Allows the employee to modify orders created by other employees on the POS.

1.10

Add / Update Service Charges

Allows the employee to add or change service charges (such as auto-gratuity) on a check at the POS.

1.11

My Reports (+ Inventory / Menusphere)

Allows the employee to view personal reports on the POS, including inventory and Menusphere reports where applicable.

1.12

Shift Review Sales Data

Allows the employee to view sales data during shift review on the POS.

1.13

No Sale

Allows the employee to open the cash drawer without processing a transaction (a "no sale" operation).

1.14

Key in Credit Cards

Allows the employee to manually type in credit card numbers on the POS instead of swiping or dipping.

1.15

Offline/Background Credit Card Processing

Allows the employee to process credit card transactions when the POS is offline or in background processing mode.

1.16

Change Table

Allows the employee to move a check from one table to another on the POS.

1.17

Change Server

Allows the employee to reassign a check from one server to another on the POS.

1.18

Log Into Toast Tables App (Waitlist & Reservations)

Allows the employee to access the Toast Tables app for managing the waitlist and reservations.

1.19

Record Excess Food Menu Items

Allows the employee to record excess food items on the POS for waste tracking purposes.

1.20

Split Checks

Allows the employee to split a single check into multiple checks on the POS.

 

Back to top

 

Delivery access and Toast Delivery Services

These permissions give employees access to features used to complete delivery orders. Toast Delivery Services (TDS) users need all delivery permissions to use TDS features.

 

Number

Permission name

Description

2.1

Delivery Mode

Grants access to Delivery Mode on the POS device.

2.2

Update All Delivery Orders

Grants the employee the ability to dispatch delivery orders to any delivery driver and update the status of all delivery orders, assuming the delivery functions are permissible.

2.3

Dispatch Driver

Assigns a driver to an unassigned delivery order and updates it to an en-route order.

2.4

Cancel Dispatch

Reverts an en-route delivery order back to an unassigned delivery order.

2.5

Complete Delivery

Updates an en-route order into a delivered order.

2.6

Update Driver

Allows the employee to change the driver assigned to a completed delivery order.

 

Back to top

 

Manager access

Manager access permissions can be assigned along with one or more mode permissions to provide access to features on Toast POS devices that involve greater responsibility. Some of these features also require Toast Web credentials.

 

Note: Any employee with any 3.x Manager permission also has the ability to add special requests to orders on the POS.

 

Number

Permission name

Description

3.1

Discounts

Allows the employee to apply manager-level discounts to checks on the POS.

3.2

Transfer / Rewards Adjustment

Employees can update loyalty accounts by transferring or combining card balances and adjusting rewards points.

3.3

Gift Card Adjustment

Allows the employee to add value to an existing gift card on the POS and in Toast web.

3.4

Bulk Transfer Checks

Allows the employee to transfer multiple checks from one employee to another at once.

3.5

Bulk Void Open Checks

Allows the employee to void multiple open checks at once.

3.6

Bulk Close Paid Checks

Allows the employee to close multiple paid checks at once from Payment Terminal or previous checks screen.

3.7

Void Items / Orders

Allows the employee to void individual items or entire orders on the POS.

3.8

Void / Refund Payments

Allows the employee to void or refund payments that have already been processed.

3.9

Unlinked Refunds

Employees can make refunds to a credit card other than the card used for payment. Example: the payment card was lost, refund to a new card.

3.10

Edit Sent Items

Employees can update the modifier options for an item after it is sent to the kitchen.

3.11

Other Payment Types

Allows the employee to accept alternative payment methods (such as house accounts or other non-standard payment types) on the POS.

3.12

Shift Review

Employees can view complete shift review data for any active employee in Manager Shift Review.

3.13

Negative Declared Tips

Employees can enter a negative tip amount in shift review if Negative Declared Tips are allowed (UI Options).

3.14

Edit Time Entries

Allows the employee to edit clock-in and clock-out times for other employees on the POS or in Toast web.

3.15

End Breaks Early

Employees can end breaks early when Enforce Minimum Time is set (Breaks).

3.16

Close Out Day

Allows the employee to run the close-out / end-of-day process on the POS.

3.17

Cash Drawers (Blind)

Employees can open a cash drawer, close out and replace cash drawers at the end of shifts, but do not see the expected cash amount for the drawer.

3.18

Cash Drawers (Full)

Employees can open a cash drawer, close out and replace cash drawers at the end of shifts, and can also view the expected cash amount for the drawer.

Note: If both the blind and full permissions are enabled, the full permission will override the blind permission and employee will be able to see expected amount total.

3.19

Cash Drawer Lockdown (Override)

Employees can clock in without being forced to choose a cash drawer. This permission can be useful for managers who close out cash drawers.

3.20

Large Cash Over/Under

Employees can close a cash drawer that has an overage or shortage larger than the configured Closeout Over/Under Max (UI Options).

3.21

Adjust Cash Drawer Start Balance

Allows the employee to change the starting cash balance in a cash drawer.

3.22

Pay Out

Allows the employee to process a cash pay out from the cash drawer (for example, to pay a vendor).

3.23

Find Checks

Allows the employee to search for and view any check, including closed checks, on the POS and in Toast web.

3.24

Register Swipe Cards

Allows the employee to register new magnetic swipe cards for employee identification.

3.25

Open Items

Allows the employee to create open (custom-priced) items on a check.

3.26

Log Book

Allows the employee to view and write entries in the manager log book in Toast web or the Toast Now app.

3.27

Send Notifications

Employees can send notifications from Toast web to the Toast devices. Setting is found under Front of House > POS Notifications.

3.28

Tax Exempt

Allows the employee to mark a check as tax exempt on the POS.

3.29

Throttle Online Orders

Allows the employee to temporarily adjust the rate at which online orders are accepted (for example, during a rush). Setting is found in the overflow menu under Pending Orders mode on POS.

3.30

Team Chat Advanced Controls

Allows the employee to access advanced controls in Team Chat, such as managing channels or moderation.

3.31

Configure Auto-Close Orders at End of Day

Allows employees to configure the Toast platform to automatically close orders at the end of the business day. Employees must have this permission at every location in your management group to configure automatic order closing.

3.32

Void / Refund Payments (Limited to Same Day Only)

Allows the employee to void or refund payments, but only for transactions from the current business day.

3.33

Age Verification Override

Allows the employee to override age verification prompts on the POS (for example, when selling age-restricted items).

 

Back to top

 

Restaurant admin access

These permissions provide access to restaurant-wide reporting and configuration in Toast Web. In most cases, employees with these permissions must also have Toast Web credentials.

 

Number

Permission name

Description

4.1

Sales Reports

Allows the employee to view sales reports in Toast Web.

4.2

Menu Reports (+ Inventory / Menusphere Reporting)

Employees can run Inventory / Menusphere reports and modify Inventory configurations. Assign with the My Reports permission for full access to Inventory / Menusphere.

4.3

Labor Reports

Allows the employee to view labor cost and scheduling reports in Toast Web.

4.4

Gift / Rewards Card Reports

Allows the employee to view gift card and rewards program reports in Toast Web.

4.5

Edit Full Menu

Employees can add and edit menus, including Open Items, Pre Modifiers, Price Levels, Sales Categories, Service Prompts, and Item Tags.

4.6

Tables

Allows the employee to configure table layouts and floor plans in Toast Web.

4.7

Configure Toast Tables (Waitlist & Reservations)

Allows the employee to configure Toast Tables settings for the waitlist and reservations feature.

4.8

Marketing Info

Allows the employee to access and manage marketing tools and campaigns in Toast Web.

4.9

Employee Info

Allows the employee to view and edit employee records (contact info, personal details) in Toast Web.

4.10

Employee Jobs & Wages

Allows the employee to manage job roles, assign jobs to employees, and view or edit wage information in Toast Web.

4.11

House Accounts

Allows the employee to create and manage house accounts in Toast Web.

4.12

Edit Historical Data

Employees can edit values for past dates, including Cash In/Cash Out, Add Cash Drop, and Update Closing Balance in the Cash Drawers report. Employees can also archive test orders.

4.13

Customer Credits & Reports

Allows the employee to manage customer credits and view customer reports. Also required (along with the entire restaurant management group) to access the Guestbook.

4.14

Local Menu Edit

Allows the employee to make location-specific edits to the menu without affecting the master menu.

4.15

New POS experience toggle access

Allows the employee to enable or disable the new POS experience for their location.

4.16

View Invoicing, Catering & Events

Users can view and print information in the Catering & Events module and Toast Invoicing.

4.17

Edit Invoicing, Catering & Events

Users can edit and create invoices, orders, leads, etc in the Catering & Events module and edit and create invoices in Toast Invoicing.

4.18

Configure Invoicing, Catering & Events

Allows the employee to configure settings for invoicing, catering, and events in Toast Web.

4.19

Settings Copy Tool

Allows the employee to use the Settings Copy Tool to copy configuration settings between locations.

4.20

Benchmarking Access

Allows the employee to view benchmarking data that compares the restaurant's performance to similar restaurants.

4.21

Benchmarking Restaurant Group Report Access

Users can access the group / multi-unit reporting in Toast Benchmarking. This feature is applicable to Restaurant Management Suite Pro subscribers only.

4.22

Enable Job-Based Access

Gives access to manage employee permissions based on clocked-in job for all locations in a management group if this permission is enabled for all locations.

4.23

Menu Audit & Cleanup

Allows the employee to access the Menu Audit and Cleanup tool for identifying and resolving menu issues.

Note: Cleanup tool is only available to select customers. If you aren't able to access the Menu Cleanup page in Toast Web (even if you have the 4.23 permission), please contact Customer Care if you'd like to complete this process.

4.24

Check Audit

customers can view historical data and can be access via order details in toast web.

4.25

Ads Manager Billing

Allows the employee to manage billing for Toast Ads Manager campaigns.

4.26

Manage Overrides on a Menu Item's Prep Stations

This permission allows customers to manage overrides on a menu item for Prep Stations.

4.27

Manage Overrides on a Menu Item's Prep Time

This permission allows customers to manage overrides on a menu item for Prep Time.

4.28

Manage Overrides on a Menu Group's Items

This permission allows customers to manage overrides on a menu group for its list of items.

4.29

Read Masked Tax Identifier

Allows retrieving the masked version of the Tax Identifier.

4.30

Read Tax Identifier

Allows retrieving the full, unmasked Tax Identifier as well as the masked version.

4.31

Write Tax Identifier

Allows writing, updating and deleting the Tax Identifier.

4.32

Write Partner Data Mapping - Global Access

This permission allows employees to manage branch mappings, job profiling, job mapping and manual sync.

4.33

Write Partner Data Mapping - Selective Access

This permission allows employees to manage job mapping and manual sync.

4.34

Manage Overrides on a Menu Item's Sales Category

This permission allows customers to manage overrides on a menu item for Modifier Groups.

4.35

Manage Overrides on a Menu Item's Modifier Groups

This permission allows customers to manage overrides on a menu item for Modifier Groups.

4.36

Write Local Pricing Management

Allows users to manage local pricing settings for menu items.

 

Back to top

 

Quick edit access

These permissions allow managers or employees to 86 an item, change prices, or add and remove menu items directly from the POS without going to Toast Web.

 

Number

Permission name

Description

5.1

Full Quick Edit

Grants access to all Quick Edit features on the POS.

5.2

Inventory & Quantity

Allows the employee to edit inventory counts and quantity limits for menu items from the POS.

5.3

Button Color

Allows the employee to change the display color of menu item buttons on the POS.

5.4

Name

Allows the employee to edit the display name of menu items from the POS.

5.5

POS Name

Allows the employee to edit the POS-specific display name of menu items (which may differ from the online ordering name).

5.6

SKU

Allows the employee to edit SKU numbers for menu items from the POS.

5.7

Price

Allows the employee to change menu item prices directly from the POS.

5.8

Add Existing Items/Mods

Allows the employee to add existing menu items or modifiers to a menu group from the POS.

5.9

Add New Items/Mods

Allows the employee to create and add new menu items or modifiers from the POS.

5.10

Rearrange Items/Mods

Allows the employee to change the display order of menu items or modifiers on the POS.

5.11

Remove Items/Mods

Allows the employee to remove menu items or modifiers from a menu group on the POS.

 

Back to top

 

Web setup access

These permissions are for owners and managers who are responsible for creating discounts, managing kitchen and payment settings, setting up taxes, and publishing configuration changes. All Web Setup features require Toast Web credentials.

 

Number

Permission name

Description

6.1

Discounts Setup

Allows the employee to create, edit, and manage discount rules in Toast Web.

6.2

Kitchen / Dining Room Setup

Allows the employee to configure kitchen routing, prep stations, dining rooms, and related settings in Toast Web.

6.3

Payments Setup

Employees can update the following Payments pages: Payment Options, Other Payment Options, No Sale Reasons, Void Reasons, Service Charges, Gift Cards Setup, Pay Out Reasons.

6.4

Publishing

Employees can push all configuration updates, made by any employee, to all devices in the Toast POS system.

6.5

Restaurant Groups Setup

Employees can update Restaurant Groups in the Other Setup section.

6.6

Restaurant Operations Setup

Employees can update Breaks (Labor), all Display Setup pages, and the following Other Setup pages: UI Options, Revenue Centers, Device Groups, GL Accounts, Takeout / Delivery, Prep / Delivery Times, Online Ordering, Online Ordering Schedule, Online Ordering Audit, Notification Setup, Barcode Config, Guest Feedback.

6.7

Change sets

Allows the employee to create and manage change sets (batched configuration changes) in Toast Web.

6.8

Tax Rates Setup

Allows the employee to create and edit tax rates in Toast Web.

6.9

Websites Setup

I believe this also grants access to BMA settings/editor

6.10

Printer and Cash Drawer Setup

Allows the employee to add and configure printers and cash drawers in Toast Web.

6.11

Data Extension View

Employees can view data extensions.

6.12

Data Extension Edit

Employees can edit data extensions.

 

Back to top

 

Device setup access

These permissions are for owners and managers who are responsible for configuring device-specific options. Some device setup options are available only after a feature is enabled in Toast Web, or require an optional service or module.

 

Number

Permission name

Description

7.1

Terminal Setup

Employees can configure fundamental device-specific options: Device Name, Primary Mode, Screen Timeout, Receipt Printer, Primary Service Area, Open Cash Drawer, Device Default Dining Option, Order Screen Menu View, Scale Model, EMV Enabled, and Add New Card Reader.

7.2

Advanced Terminal Setup

Employees can configure restricted device-specific options: Always Print Receipts, Order Auto-Firing, Revenue Center, Allow Cash Payments, Cash Receipt Options, Digital Receipts, Override Blank Tab Name Prompt, Device Group, Order Purge Threshold, Bluetooth easy pairing, Credit Card Pre-Authorization, and Test Mode.

7.3

KDS and Order Screen Setup

Allows the employee to configure Kitchen Display System (KDS) screens and order screen settings.

7.4

Order Ready Board Access

Allows the employee to access and configure the Order Ready Board display.

 

Note: Some device setup access is also available through POS Access permissions 1.1–1.5. Employees with those mode permissions can access the following options under Setup > Device Setup: Order Auto-Firing, Primary Service Area, Device Default Dining Option, Override Blank Tab Name Prompt, Device Group, Order Purge Threshold, Bluetooth Easy Pairing, Credit Card Pre-Authorization, EMV Enabled, Add New Card Reader, Default Item Selection Mode, Enable SKUs, Enable Quote Time, Menu Grid Dimensions, and Model (read-only).

 

Back to top

 

Account admin access

These permissions provide access to sensitive or specialized account information. Employees with any of these permissions must also have Toast Web credentials.

 

Number

Permission name

Description

8.1

Financial Accounts

Allows the employee to view and manage financial account settings, including bank account information for deposits.

8.2

User Permissions

Allows the employee to view and edit access permissions for other employees. Required to assign permissions to jobs or individual users.

8.3

Data Export Config

Allows the employee to configure automated data exports and download export files.

8.4

Manage Integrations

Employees can configure integration partner services (My Integrations).

8.5

Toast Shop Purchases

Allows the employee to make purchases from the Toast Shop (hardware, accessories, supplies).

8.6

Toast Restaurant Card

Allows the employee to manage the Toast Restaurant Card (a business spending card).

8.7

Instant Deposit

Allows the employee to request instant deposits of available funds.

Note: Instant Deposit is currently enabled only in a limited release for a limited number of customers in the United States.

8.8

TipOut

Allows the employee to configure and manage the TipOut feature for automatic tip distribution.

8.9

Accounting Payroll Setup

No longer active

This permission is no longer checked by the Toast platform and has no effect on feature access. You cannot assign this permission to new employees. It may still appear on employees who were assigned this permission before February 2026. Access is now controlled by the HR+ role in Toast Payroll.

Previous purpose

Previously gave access to the Accounting pages related to payroll, which granted the ability to manage integrations between Toast Payroll and your accounting software.

8.10

Accounting: Sales Setup

No longer active

This permission is no longer checked by the Toast platform and has no effect on feature access. You cannot assign this permission to new employees. It may still appear on employees who were assigned this permission before February 2026. Access is now controlled by the Financial Accounts permission.

Previous purpose

Previously gave access to the Accounting pages related to sales, which granted the ability to manage integrations between the Toast platform and your accounting software.

8.11

Accounting: Accounts Payable Setup

No longer active

This permission is no longer checked by the Toast platform and has no effect on feature access. You cannot assign this permission to new employees. It may still appear on employees who were assigned this permission before February 2026. Access is now controlled by the Financial Accounts permission.

Previous purpose

Previously gave access to the Accounting pages related to accounts payable, which granted the ability to manage integrations between the Toast platform and your accounting software.

 

Note: If a user needs to add or remove a subscription or module, make sure to enable both 8.4 Manage Integrations and 8.5 Toast Shop Purchases.

 

Back to top

 

Frequently asked questions

What permission do I need to perform a specific task?

Use the table below to find the permission you need for common tasks. If your task is not listed, search the full permission tables above by category.

 

Task

Permission needed

Number

Void a check or void items on a check

Void Items / Orders

3.7

Process a refund

Void / Refund Payments

3.8

Apply a discount to a check

Discounts

3.1

Open or access a cash drawer

Cash Drawer Access

1.7

Open the cash drawer without a transaction (no sale)

No Sale

1.13

Count or reconcile a cash drawer

Cash Drawers (Blind) or Cash Drawers (Full)

3.17 or 3.18

Find and reopen a closed check

Find Checks

3.23

Split a check

Split Checks

1.20

Run a sales report

Sales Reports

4.1

Run a labor report

Labor Reports

4.3

Edit menu items or menu descriptions

Edit Full Menu

4.5

Publish menu or configuration changes

Publishing

6.4

Edit or configure prep stations

Kitchen / Dining Room Setup (in Toast Web) or override permissions 4.26/4.27 (at location level)

6.2 or 4.26/4.27

Add or edit employees

Employee Info

4.9

Manage job roles and wages

Employee Jobs & Wages

4.10

Assign or edit permissions for other employees

User Permissions

8.2

86 a menu item from the POS

Inventory & Quantity (or Full Quick Edit)

5.2 (or 5.1)

Change a menu item price from the POS

Price (or Full Quick Edit)

5.7 (or 5.1)

Add or remove a subscription or module

Manage Integrations + Toast Shop Purchases

8.4 + 8.5

Edit time entries / labor punches

Edit Time Entries

3.14

Set up everything except payroll

Assign all permissions except the payroll-related ones (8.9 Accounting Payroll Setup). Review the full list to confirm.

All except 8.9

 

Why aren't my permissions working after I assigned them?

If you assigned a permission but the employee still cannot access the feature:

  • Ask the employee to sign out of the POS and sign back in.
  • On the POS, try rebooting the device or resyncing data. See Resync All Data on Your Devices on how to resync all data on the POS.
  • If the employee accesses Toast Web, ask them to clear their browser cache and cookies, or try an incognito/private browsing window.
  • If your restaurant has multiple locations, confirm the permission is assigned at the correct location level — not just at the group level.
  • For more troubleshooting steps, see Why aren't my permissions working correctly?

 

Can I assign a permission I don't have myself?

No. You can only grant a permission that your own account already has. If you need to assign a permission you do not have, ask another administrator who has that permission to either assign it to the employee directly or grant it to your account first. If no one at your restaurant has the needed permission, contact Customer Care for assistance.

 

How do permissions work with multiple locations?

If your restaurant group has more than one location:

  • Group-level permissions apply to all locations in the group by default.
  • Location-level permissions override the group-level settings for that specific location.
  • An employee might have a permission enabled at the group level but disabled at a specific location, which would prevent them from using that feature at that location.
  • When troubleshooting, check both the group-level and the location-level permission settings.
  • For step-by-step instructions on managing multi-location permissions, see the "Advanced Permissions Setup for Multilocation Restaurant Groups" section of Assign user access permissions.

 

I see a "view-only permissions" error

If you see the error "The view is read-only as you don't have this permission and restaurant access in the following restaurants," see Get help with permissions error: view-only permissions for specific resolution steps.

 

I can't edit an employee's permissions

If you see the error "Sorry, You Can't Edit Permissions You Don't Have," it means you are trying to assign a permission that your own account does not have. See Get help: can't edit permissions for troubleshooting steps.

 

Back to top

 

Related articles

 

Back to top