Last updated: Jan 29, 2026, 11:13 AM
Toast Multilocation Management (MLM) restaurant groups must have at least one gatekeeper or superuser at the corporate level who has access to all Toast permissions at all locations. This access is granted by a Toast employee, usually during onboarding. The gatekeeper or MLM Super User can vary depending on how the restaurant group is structured and operates. Typically, this role is handled by an Owner, General Manager, Director of Operations, or equivalent role.
The permissions granted to the managers at individual locations are at the gatekeeper's discretion. For example, the gatekeeper may not want a location's manager to have access to certain Account Admin Access permissions such as 8.1 Financial Accounts or 8.5 Toast Shop Purchases.
Location managers can grant the appropriate permissions to their staff in two ways:
To review an employee's assigned job and permissions, follow these steps:
Note: For an overview of all available access permissions, check out the .
To adjust a staff member's wage, you must have the 4.10 Employee Jobs & Wages permission at the restaurant location of the rate they're trying to adjust.
The ability to add or remove job roles for an employee is based on the 4.10 Employee Jobs & Wages permission and also on the permissions within the job role. The user granting a job to another user must have all the permissions that the job they're granting has, plus permission 4.10. The user granting a job does not necessarily need that job themselves, as long as they have the permissions associated with that job.
This applies to locations as well. Let's say a user is looking to grant the Key Employee job to another user. If the user granting the job has the permissions associated with the Key Employee job at location A, they can grant that job to users at location A. But if the user granting the Key Employee job does not have the Key Employee permissions at location B, they will not be able to complete their task.
To add or remove a job from a user, simply select or deselect the checkbox associated with that job. You only need to press Save since these changes are automatically published once they are saved.
Users are typically granted permissions based on the jobs they're assigned to, so adjusting permissions outside of adding or removing jobs typically only happens on a one-off basis. In order for you to add or remove a staff member's permissions, you must meet these two requirements:
Check out these examples:
Commonly, multilocation restaurants will open a new location and will need to assign permissions to existing employees at the new location. To add or remove a permission for an individual employee (rather than for the job as a group):
The ability to edit a user's basic information (including name, contact information, and POS access code) is included in the 4.9 Employee Info permission. If an account has been created for this profile, the email address and password cannot be edited by anyone besides the individual themselves.
In order for you to make changes to your own employee information or to another user's employee information, you yourself must have the 4.9 Employee Info permission granted to you.
To make changes to a user's employee information at another location, you must have the 4.9 Employee Info permission granted to you at your original location and at the location where the user's employee information needs to be changed.
Additional Resources for Permissions & Multilocation Management