Last updated: Jul 1, 2026, 4:13 PM
Learn best practices and solutions to common permissions issues for Toast Multilocation Management.
| Some of the processes, pages, and information here regarding employee profiles and permissions will soon be updated. If your experience does not match the information in this article, visit Employee and Job Permission Updates in Toast Web. |
Applies to: Toast Web (Multilocation Management restaurant groups)
Permissions needed:
What you'll accomplish: Diagnose and resolve the most common MLM employee access and permission problems, and know when the fix has to come from your restaurant's super user rather than Customer Care.
Note: In an MLM restaurant group, your super user (also called the gatekeeper or administrator) is the person at the corporate level who holds every Toast Web permission at every location. Most permission problems below are resolved by working with your super user. After any permission change, log out of Toast Web and log back in, use Google Chrome, and clear your cache so the change takes effect.
Find your symptom in the table below, then go to the matching section for full steps.
| Symptom | Most Common Cause | Quick Fix |
|---|---|---|
| You see "Sorry, you can't edit permissions you don't have" or "you don't have permission to update the selected permissions," even though you are the owner | You do not hold every permission you are trying to assign, plus 8.2 User Permissions, at that location | Have your super user add the missing permissions to your profile |
| A permission or override works at one location but not another | Permissions are scoped to each location in MLM | Confirm and update the permission at the specific location, then log out and back in |
| An employee still cannot access a feature after you updated their permissions | They are signed in on the POS, or they have a duplicate profile | Have them sign out and back in or resync the POS; check for a duplicate profile |
| A POS access code is invalid or conflicts across locations | The employee is using the code for the wrong profile, or duplicate profiles exist | Validate the POS access code and archive any duplicate profiles |
| A saved change does not appear | Browser cache, or a browser other than Google Chrome | Log out of Toast Web and back in; switch to Google Chrome and clear your cache |
What this means: To assign or edit another employee's permissions in an MLM group, you must hold every permission that employee already has, plus the 8.2 User Permissions permission at the same location. Being an owner or administrator does not automatically grant this. If even one permission is enabled on the other employee's profile but not on yours, Toast blocks the change and may show Sorry, you can't edit permissions you don't have.
Expected outcome: Once your permissions match or exceed the other employee's permissions and you hold 8.2 User Permissions at that location, you can edit their profile.
Note: Customer Care cannot grant or restore these permissions for you. The change must come from an existing super user or admin at your restaurant who already holds the permissions. If you see a Forbidden error when saving, you are trying to edit group-level permissions you do not hold yourself — another user with group-level permissions must make the change.
For the full rules on who can edit permissions across MLM locations, see Manage User Jobs & Permissions With MLM. For step-by-step help with specific error messages, see Get Help With User Permissions for Toast POS.
What this means: In an MLM setup, permissions are scoped to specific locations. You may hold full permissions at one location but limited permissions at another. Toast checks your permissions at the exact location you are currently editing, so an override that works at one store may not apply at another.
Expected outcome: Once permissions are corrected at the affected location and you log back in, the permission applies consistently at that location.
Note: A manager with access to all relevant locations can update an employee's profile so they have the correct permissions everywhere they work. Employees are often assigned different jobs at different locations, which changes what data and settings they can view and adjust.
What this means: You saved a permission change, but the employee still cannot access the feature on the POS or in Toast Web. This usually means the change has not synced to their device, or you updated the wrong profile.
Expected outcome: After the device syncs and the correct profile is updated, the employee can access the feature.
If duplicate profiles are causing the problem, see Consolidate Toast Web Login Credentials to archive the extra profile and keep a single active profile.
What this means: An employee with more than one Toast Web profile across locations may run into an invalid or conflicting POS access code because they are using the code tied to the wrong profile.
Expected outcome: The employee has one active profile and one POS access code that works at every location they are assigned to.
Note: As long as a POS access code is not already in use at a location, an employee can use the same POS access code at every location to which they have been added.
Work through the sections above first. You will need Customer Care to resolve the issue only if one of the following is true at your restaurant group:
When you contact Customer Care, have the affected employee's name, email address, the locations involved, and any related case numbers ready.
You cannot edit another employee's permissions, even as the owner, unless you hold every permission that employee has, plus the 8.2 User Permissions permission at the same location. Being the owner does not automatically grant this. If even one permission is enabled on their profile but not on yours, Toast blocks the change. To fix this, ask your super user or another user who already holds the missing permissions to add them to your profile.
Also asked as:
A super user is the employee at the corporate level who holds every Toast Web permission at every location in your MLM restaurant group, which lets them edit any employee's permissions at any location. The super user is also called the gatekeeper, administrator, or super admin, and the role is usually held by an owner, general manager, or director of operations. To find out who your super user is, ask your restaurant's leadership team — Customer Care does not assign or transfer this role on customer accounts.
Permissions work at one location but not another because MLM permissions are scoped to each location individually. You may hold full permissions at one store, and limited permissions at another, and Toast checks your access at the exact location you are editing. Confirm your permissions at the specific location and have an admin with group-level access update them if they differ.
Yes, an employee can use the same POS access code at every location they have been added to, as long as that code is not already in use at a particular location. If the code is invalid or conflicts, the employee may have duplicate profiles or be using the code tied to the wrong profile.