The Security roles section enables the school to configure different levels of user login. This means that the school can limit certain functions of the system only to users who are authorised. For example, the school may wish that members of the ‘Operator’ role do not have permission to perform refunds at the Point of Sale whereas the ‘Supervisor’ and ‘Manager’ roles can.

By default, there are six roles created. These roles can be edited or added to as required by the school. The below table provides a brief description of the default security roles:

Role name Description
Administrators This role is intended for users who will have unlimited access to the system.
Manager The manager role is intended for kitchen managers that can access the majority of system features but are restricted from system configuration screens such as ‘Configure internet payments’.
Supervisor Half-way between the manager role and the operator role. This would be a more senior/trusted member of staff who could perform refunds and allow overspends at the Point of Sale.
Operator A typical Point of Sale user with limited access to the system.
Read Only This user cannot make any changes to the system or it’s data but can still view it and run reports.
Reval Manager Required by the internal Reval Manager login. This login runs the Revaluation (Top up) machines if the school have them.

Adding a new security role

New security roles can be added by pressing the New button.

Enter a name for the new security role and press OK. The role will be created.

Setting role permissions

To set the roles permissions, select the role from the list and select or deselect the required permissions using the list on the right-hand side of the screen. The available permissions are detailed in the table below.

Permission Description
Access all schools Has access to all schools if the system is configured for multiple schools which can be accessed via the menu bar at the top of the Back Office software.
Add partners Can add new partners in the API and manage API permissions.
Add users Can add new users directly into Impact Fusion in the Users tile. (These accounts will not link to iDStore).
Add value Can add value directly to users’ accounts in the Users tile.
Allow export of data in response to GDPR Can manage GDPR button on user accounts. Can view, print, download and export.
Allow one time supervisor allowance (PoS) Can allow a supervisor allowance during a transaction on the PoS.
Allow overspend (PoS) Can authorise overspends at the Point of Sale to allow users to enter a deficit and allow a sale.
Allow user notifications Will be sent system notifications (if applicable).
Assign locations Can assign locations to new devices.
Back office Can log into the Impact Back Office application.
Capture facial recognition templates Can capture facial recognitions from locations that have the function active.
Configure internet payments Can add a new Internet Payment provider and make changes to the configuration of the Internet Payment provider.
Configure password policy Can configure password policies for login accounts.
Edit layouts Can edit the layout designs that are utilised on the Point of Sale, Pre-Order kiosks & Smart Boards.
Edit locations Can make changes to the configuration of system locations (i.e. PoS, Reval, Back office, etc).
Edit logins Can create and edit system logins for Back Office, PoS and Smart board.
Edit products Can make changes to PLUs and pricing. (Known Issue: Cash Up tile will only appear on the home screen if this permission is selected. Will be fixed in a later version to be released.)
Edit reports Can clone, edit and create reports.
Edit roles Can create and edit security roles to assign them to Fusion logins.
Edit schools Can make changes to school settings.
Edit settings Can access the system settings screen in the Impact Back Office application.
Edit user type settings Can edit the user type settings within the settings.
Edit users Can make changes to users within Users tile.
Issue card Can issue cards to users.
Manage internet payments Can access the Internet Payments tile.
Perform cash declaration Can perform a cash declaration in the Cash up tile. Will have insufficient permission otherwise. Cash Variance needs to be enabled in the school configuration.
Perform cash up Can perform a cash up in the Cash up tile.
Point of Sale Can log into the Point of Sale application.
Point of Sale Voice Can log into the Voice Point of Sale application.
Pre-order kiosk operator Can log into the Fusion Pre-order Kiosk, view the configuration and manage software exit settings.
Print Activity Can print out users’ Activity report.
Print PIN Can print out users’ PIN numbers.
Print QR Can print out a users’ QR code.
Print Receipt Can print out a receipt after adding a value to a user’s account.
Refunds (PoS) Can authorise refunds at the Point of Sale.
Reval manager Can log into the Reval Client application. Only applicable for the Reval setup and will not be used for any other purpose.
Smartboard operator Can log into the Impact Smartboard application and operate the application.
SQL to FTP Can perform SQL to FTP upload functions in the Upload settings tile in Settings.
View activity Can view users’ activity in the Impact Back Office.
View locations Can view the configuration of system locations.
View logins Can view system logins within the system settings.
View reports Can generate and view reports. Also allows PoS operator to perform a Cash Declaration in the Functions option.
View revaluers Can view the revaluation units screen.
View roles Can view the security roles screen within the system settings.
View schools Can view the schools screen within the system settings.
View settings Can view the schools settings.
View transactions Can view user transactions.
View users Can view the users screen in Impact Back Office.
Last modified: 23 March 2021

Feedback

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Please do not use this for support questions.
https://www.crbcunninghams.co.uk/support

Post Comment