Last updated: May 14, 2026, 10:56 AM
Learn how to add, edit, & delete employees in Toast Web. Editing employee wages, permissions, POS access codes, & password security are also covered in this article.
Learn essential Toast Web configurations for going live! Select the Getting Started button below to start this learning path.
Interested in adding Toast Payroll to your business? Click below to talk to a sales rep!
Getting Started With Toast Web Talk to a Sales Rep
Applies to: Toast Web
If you use Toast Payroll, add and edit employees in Toast Payroll instead so timesheets, tips, and pay sync correctly. See Toast Payroll: Sync Information With Toast Web.
Permissions needed:
What you'll accomplish: Add a new employee to Toast Web with the right account type, edit an existing employee profile or permissions, or archive an employee who no longer works for you.
Note: Toast Web profiles serve two purposes. A POS access code (passcode) lets an employee clock in and use Toast devices. A Toast Web account lets an employee log in at toasttab.com to view reports, change menus, or perform other back-end functions. Most hourly staff only need a POS access code—grant a Toast Web account only to owners, managers, admins, accountants, or anyone who needs back-end access. To learn more about the difference between a profile and an account, see Log in to Toast: Create an Account.
Use this table to jump to the most common scenarios that occur:
| Symptom or Goal | Most Common Cause | Quick Fix |
|---|---|---|
| Add an employee without requiring an email address | Set Invite to create account to No so they only use the POS | |
| Need to give an employee all permissions or mirror another employee | Toast does not auto-clone access; assign the same job(s) at the same locations | See Update Employee Permissions in Toast Web and Get Help With User Permissions for Toast POS |
| Permissions error: It says I don't have permissions even though you are the owner | You must already hold every permission you are trying to assign, plus 8.2 User Permissions | |
| Can't archive an employee—primary user error | Your restaurant's primary user cannot be archived | The owner or restaurant admin must contact Customer Care to change the primary user first |
| New hire can't log in to Toast Web after invite | Invitation expired (seven days), wrong email, or invite landed in spam | See Resend an Email Invitation and Grant or Remove Toast Web Access for Existing Employees |
| New hire can't clock in on the POS | POS access code missing, employee profile Expired or Invited, or duplicate profile | |
| Inherit vs Override—which one should I use? | Inherited permissions come from the job; Override sets a permission at the individual employee level | See the FAQ entry What's the difference between inherit and override permissions? |
| Toast Payroll customer needs to remove an employee | Terminate the employee in Toast Payroll; the Toast Web profile archives automatically within two hours | See Terminate or Archive an Employee in Toast Web or Toast Payroll |
There are two ways to add an employee to Toast Web:
To add a new employee in Toast Web:
Expected outcome: The new employee appears on the Employees page with a status of Active (no account needed) or Invited (waiting for the employee to accept the invite). If you assigned a POS access code, the employee can clock in at the POS once the next data sync runs.
All active employees are listed on the Active tab of the Employees page, with one of these labels in the Status column:
Inactive employees are listed on the Archived tab of the Employees page. See Archive (Delete) an Employee in Toast Web for details.
When you create an employee profile with Invite to create account set to Yes, the employee's status shows as Invited and Toast sends them an email to set a password. If the email is lost or misplaced:
Expected outcome: A new invitation email is sent. The expiration timer resets to seven days.
If the email still doesn't arrive:
For more invitation troubleshooting, including 550-series email rejections and the Invalid or in Use error message documented in Grant or Remove Toast Web Access for Existing Employees, see Grant or Remove Toast Web Access for Existing Employees.
Note: If you use both Toast Web and Toast Payroll, the newer Toast Web layout looks similar to Toast Payroll. To confirm which system you are in, check the URL—Toast Web is on toasttab.com and Toast Payroll is on payroll.toasttab.com.
To open an employee's profile in Toast Web:
The profile page has these tabs:
Important: If this employee also has a Toast Payroll profile, you'll see a yellow notification on the Jobs & Permissions tab. Make job and pay changes in Toast Payroll to avoid syncing and saving issues—editing Toast Web and Toast POS permissions is still done on this page. Select Go to Toast Payroll to navigate to the Toast Payroll login screen. If you are sure you want to edit job and pay directly in Toast Web, select the checkbox to override the warning. See Toast Payroll: Sync Information With Toast Web for the full sync rules.
To update an employee's name, chosen name, email address, phone number, or POS access code (passcode):
Expected outcome: The updated information appears on the Overview tab. Changes to the POS access code take effect on the POS after the next data sync.
Note: If the employee has already activated their Toast Web account, they (not a manager) must update their own email address or password from the My Account page. See Log in to Toast: Update Your Account for those steps.
Permissions are typically tied to the jobs an employee is assigned to. For example, a bartender job has a set of default permissions that an employee inherits when assigned that job. In most cases, edit the permissions of the job rather than the individual—see the Update a job's permissions section of Create and Edit Jobs (Roles) for Toast POS.
It's a good idea to periodically review and update employee permissions so no jobs or employees have more access than they need.
To update an individual employee's permissions:
Expected outcome: The employee's effective permissions reflect the override. The employee should log out and back in for the change to take effect on the POS.
Note: If you see the Toast error Sorry, you can't edit permissions you don't have (documented in Get Help With User Permissions for Toast POS), a Forbidden error, or the Override toggle is missing, you do not hold every permission you are trying to assign. Have an admin or owner who holds the missing permissions make the change, or have them grant the missing permissions to your profile first. For full troubleshooting—including the I-am-the-owner-but-it-says-I-don't-have-permissions scenario, mirroring another employee's access, and the Someone needs to unlock this for you message—see Get Help With User Permissions for Toast POS.
To update an employee's job or role in Toast Web:
Expected outcome: The selected jobs appear under the employee's profile. The employee inherits the permissions for any newly assigned job.
Note: If the job you need does not exist yet, create it first. See Create and Edit Jobs (Roles) for Toast POS.
Wages are typically tied to the job an employee is assigned to rather than to the individual. For example, a bartender job has a default wage that the employee inherits when assigned that job. In most cases, edit the job-level default wage rather than overriding an individual wage—see the Update a job's wages section of Create and Edit Jobs (Roles) for Toast POS.
To override or update an individual employee's wage for a specific job:
Expected outcome: The wage override appears on the employee's Jobs & Permissions tab. Pay calculations use the override starting on the effective date.
Note: Scheduling a future effective date is only available for restaurants with Toast Payroll. Without Toast Payroll, wage changes for both individuals and jobs cannot be scheduled and take effect immediately on save.
Archiving an employee removes them from your active employee list, effectively deactivating them. They can no longer log in to Toast Web or use Toast devices, but they still appear in labor reports for historical reporting. The 4.9 Employee Info permission is required to archive or restore an employee.
Important: If you use Toast Payroll, terminate the employee in Toast Payroll instead—this archives the mapped Toast Web profile automatically within two hours. The only typical reason to archive in Toast Web alone (when you have Toast Payroll) is if an employee has duplicate Toast Web profiles. See Terminate or Archive an Employee in Toast Web or Toast Payroll.
Need to "uninvite" an employee from Toast Web? If you created an employee account with back-end access but want to prevent them from accessing Toast Web, archive their account and then recreate the profile without an email address. If you use Toast Payroll, check the employee's mapping after unarchiving them—see Toast Payroll: Manage Employee Mapping. Alternatively, to restrict back-end access without archiving, change the associated email address to a placeholder. This removes the employee's ability to log in to Toast Web while preserving their employee profile and POS access.
To archive an employee profile in Toast Web:
Expected outcome: The employee is removed from the Active tab and appears on the Archived tab. They can no longer log in to Toast Web or use the POS access code.
Important: If you receive an error message when trying to archive an employee, it may be because you are attempting to archive your restaurant's primary user. The primary user cannot be archived. To request a change to your primary user, the owner or restaurant admin must contact Customer Care.
Archived employees with hours worked continue to appear on reports if they fall within the selected date range, but they are not available on the employee filter options. If you want to use the employee filter to search for a person by name, you can temporarily unarchive that employee and view the report.
If you navigate to Reports > Labor > Time entry management and filter the report to your desired dates, you'll see time entries for all employees, including archived ones.
Archived employees also still appear on the Timesheets report, and those timesheets are editable. The Tips Management report also shows archived employees' information and still sends it to Toast Payroll. Note: If an archived employee in Toast Payroll has also been terminated (which is typical), the tip sync results in an error.
Archived employees can be re-activated to restore their access to the POS and Toast Web.
Expected outcome: The employee returns to the Active tab with their previous permissions and POS access code. If you use Toast Payroll, verify the mapping after restoring—see Toast Payroll: Manage Employee Mapping.
To generate a list of active employees as a .csv file, select Export all employees from the main Employees page. The file includes employee names, contact information, assigned jobs, POS access codes, and more.
Expected outcome: A .csv file downloads automatically.
To add an employee without requiring an email address, set the Invite to create account toggle to No when you create the profile. Hourly staff who only clock in and use the POS do not need an email or a Toast Web account. See Add a New Employee in Toast Web for full steps.
Inherited permissions come from the employee's assigned job—they appear as gray checkboxes and are applied automatically. Overridden permissions are manually set at the individual employee level—they appear as blue checkboxes and differ from job defaults. Use Override when an employee needs access beyond their job defaults or when you need to restrict a specific permission for one person. For full guidance, see Get Help With User Permissions for Toast POS.
Toast does not support cloning or mirroring an employee profile automatically. To match another employee's access, assign the same jobs at the same locations. Using job-based permissions (rather than individual overrides) makes this consistent and easier to maintain. To grant every permission to one person, you must hold every permission yourself plus 8.2 User Permissions. For step-by-step guidance, see Get Help With User Permissions for Toast POS.
When you see the Toast error Sorry, you can't edit permissions you don't have, a Forbidden error, or a missing Override toggle, the signed-in account does not hold all the permissions of the employee being edited—even if you are the owner. You must already have every permission that the other employee has, plus 8.2 User Permissions. For full troubleshooting steps—including the scenario where you have permissions at multiple locations and need group-level permissions—see Get Help With User Permissions for Toast POS.
If you get an error when archiving an employee, the most common cause is that the employee is your restaurant's primary user. The primary user cannot be archived. To request a change to your primary user, the owner or restaurant admin must contact Customer Care. If you use Toast Payroll, an archive-an-owner-profile request also requires Customer Care assistance because reactivation involves account-level changes.
Start with these checks:
If you use Toast Payroll, add new employees in Toast Payroll. Once you hire someone in Toast Payroll, Toast automatically creates a mapped Toast Web profile and keeps the two profiles in sync (time entries, tips, jobs, pay, status). To remove an employee, terminate them in Toast Payroll—the mapped Toast Web profile archives automatically within two hours. See Terminate or Archive an Employee in Toast Web or Toast Payroll and Toast Payroll: Sync Information With Toast Web.
In Toast Payroll, the Employee ID (employee number) is a unique identifier auto-generated when you hire someone, and it syncs to Toast Web as the Employee ID. If you change the employee number in Toast Payroll after hiring, the POS access code in Toast Web is not updated automatically. To set or change a Toast Web Employee ID for an existing employee, edit their Profile tab in Toast Web. For full details on the Toast Payroll side, see Employee Management: Complete Guide for Toast.
If you have worked through the steps above and the issue persists, gather this information before contacting Customer Care. The scenarios below typically require account-level intervention that cannot be resolved by self-service:
Have the following ready: