Location permissions
Roles say what a person can do. Location permissions say where, and can grant or remove individual capabilities for one person at one store.
Page: Admin -> Permissions (/admin/location-permissions) · Role required: admin
The capabilities
| Capability | What it allows |
|---|---|
| View Sales | See sales forecasts and sales actuals for the location |
| Adjust Sales | Edit 15-minute slot values on a draft sales forecast |
| Publish Sales | Move a sales forecast to Published |
| View Labor | See the labor forecast, hours, and cost |
| Adjust Labor | Override staffing hours on the labor forecast |
Each role starts from a baseline set of capabilities (General Manager, Manager, Read Only). An override changes the baseline for one user at one location.
Bulk assign permissions
Use this when onboarding a new manager who needs the same access at several stores.
- Go to Admin -> Permissions.
- Open the Bulk Assign Permissions panel.
- Select the user.
- Select one or more locations.
- Tick the capabilities to grant.
- Click Assign.
Create a single override
- In the per-user section, select the user and the location.
- Tick or untick the individual capabilities.
- Click Save Override. A confirmation reads "Permission override saved."
Remove an override
Click Remove Override on the row. The user falls back to their role baseline for that location and the page confirms "Override removed."
Common patterns
| Goal | How |
|---|---|
| GM can build but not publish | Grant View + Adjust Sales, leave Publish Sales off, and route publishing through approval settings |
| Regional manager sees several stores read-only | Bulk assign View Sales + View Labor across the region |
| Temporary cover during a leave | Bulk assign the extra location, then remove the override when cover ends |
If a user reports "location dropdown is empty" or a 403 when opening a forecast, check this page first. Permissions are enforced by the API, not only hidden in the UI, so a missing grant blocks the action everywhere including Slack and the API.