Scan-only really means scan-only
Quantities and expiry batches, never names, prices or placement.
Granular permissions
Inventory User Permissions
Grant each person exactly what they need — scanning only, moving stock, full editing — enforced in the database, not just hidden in the interface.
- Ten separate permissions, ticked individually
- One-tap presets: Scanner only, Warehouse staff, Manager
- Least privilege by default — new invites can only scan
- Enforced server-side, identically on web, iPhone and Android
What granular permissions actually mean
Plenty of software claims "role-based access" and then simply hides buttons. If the underlying request still succeeds, that is decoration rather than security — a modified app or a stale browser tab walks straight through it.
Here, permissions are enforced by database rules at field level. A member with scanning rights can change a quantity and nothing else: not the name, not the price, not the barcode, not the location. The request itself is refused, which is why the same limits hold on the mobile apps without shipping a single line of new app code.
What you get
Ten distinct permissions
Add, edit, move, scan, register scanners, manage aisles, API, activity, notifications, AI.
Presets for speed
Scanner only, Warehouse staff or Manager applied in one tap, then fine-tuned.
Least privilege default
A new invite starts with scanning alone — you deliberately add anything more.
The UI follows the rules
Members simply do not see tools they cannot use, so nothing dead-ends.
Owner-only actions stay owner-only
Deleting items, billing, team management and API keys never delegate.
Security you can prove, not just describe
Every permission is checked where the data lives. That is what makes the guarantee identical in a browser, in the iPhone app, and in anything anyone builds against the API.
How it works
1
Pick a preset
Start from Scanner only, Warehouse staff or Manager on the Team page.
2
Fine-tune
Tick or untick individual permissions; each one explains exactly what it grants.
3
Change anytime
Update permissions later and they apply as soon as the member reloads.
Frequently asked questions
Can I let staff scan stock without letting them change prices?
Yes — that is precisely what the Scan items permission does. They can adjust quantities and work with expiry batches, but any attempt to change a name, price, barcode, cost or location is refused by the database. They also never see business valuation figures.
Do permission changes take effect immediately?
The database enforces the new permissions instantly. The member’s open browser tab or app keeps its previously-loaded interface until it refreshes, so a quick reload gives them the correct view — but any action beyond their new limits fails from the moment you save.
What can team members never do, regardless of permissions?
Delete inventory items, manage billing or plans, manage other team members, generate API keys, or see business valuation. Those stay with the owner permanently.
Does this work on the mobile apps?
Yes, and without needing an app update, because the rules live in the database rather than the client. The apps are getting a matching UX pass to hide controls a member cannot use, but the security guarantee is already in force on every platform.
Explore related features
Ready to try it?
Start free with 50 items — no credit card, no trial countdown. Import your spreadsheet and you have a working system in minutes.