> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getcuemanager.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Roles and permissions
> Who can see and do what across your club.
Access in CueManager comes from two things: the role you give a user, and the per-module permission matrix attached to that user. This page covers both, plus the areas that sit outside the matrix entirely.
## Roles
| Role | Scope | Typically used for |
| --------------------- | -------------- | --------------------------------------------------------------------------------- |
| **SuperAdmin** | All branches | The account with no single home branch; also the platform operator role |
| **OrganizationAdmin** | The whole club | The owner who registered the club — manages branches, users, and the subscription |
| **BranchManager** | One branch | Day-to-day management of a single branch |
| **FrontDesk** | One branch | Reception: opening tables, registering walk-ins, tabs |
| **POSStaff** | One branch | The canteen or shop till |
| **Marker** | One branch | Scoring only — opening the marker and recording frames |
**OrganizationAdmin** is assigned automatically to whoever registers the club and is not offered in the **Role** dropdown. **SuperAdmin** is only offered when the signed-in user is themselves a SuperAdmin. Every role except SuperAdmin must be given a **Branch**.
## Modules and actions
Fine-grained access is a matrix of modules against four actions: **View**, **Create**, **Edit**, and **Delete**.
| Module | Controls |
| ----------- | -------------------------------------------------- |
| Tables | The live floor, table records, reservations |
| Members | Member profiles, wallets, plan assignment |
| Sessions | Starting, running, and checking out table sessions |
| Reports | The reports section and PDF exports |
| Inventory | POS stock levels and stock movements |
| POS | The terminal, catalogue, and sales history |
| Users | Staff accounts and their permissions |
| Settings | Branches, club settings, membership plans, cameras |
| Tournaments | Tournaments, participants, brackets, prizes |
| Tabs | Open customer tabs, charges, settlements |
| Expenses | Expense categories and expense records |
Two rules are enforced in the matrix as you edit it:
* Unchecking **View** for a module automatically unchecks Create, Edit, and Delete for it.
* Checking **Create**, **Edit**, or **Delete** automatically checks **View**.
## Default access per role
Choosing a role in the **Role** dropdown loads that role's defaults into the matrix. "Full" means all four actions.
| Module | SuperAdmin | OrganizationAdmin | BranchManager | FrontDesk | POSStaff | Marker |
| ----------- | ---------- | ----------------- | ------------- | ------------------ | -------- | ------------------ |
| Tables | Full | Full | Full | View, Create | — | View |
| Members | Full | Full | Full | View, Create | — | — |
| Sessions | Full | Full | Full | View, Create | — | View, Create, Edit |
| Reports | Full | Full | Full | View | — | — |
| Inventory | Full | Full | Full | — | View | — |
| POS | Full | Full | Full | — | Full | — |
| Users | Full | Full | — | — | — | — |
| Settings | Full | Full | — | — | — | — |
| Tournaments | Full | Full | Full | View | — | — |
| Tabs | Full | Full | Full | View, Create, Edit | — | — |
| Expenses | Full | Full | Full | — | — | — |
## Effective access
A user's real access is the matrix saved on their account, not their role name. The role only supplies the starting point.
The matrix is filled with that role's defaults.
Tick or untick anything. A FrontDesk user who also runs the till, for example, can be given POS View and Create without changing their role.
From then on, the saved matrix decides what that user sees. Sidebar entries, pages, and action buttons all appear or disappear according to it, and the server enforces the same rules on every request.
Editing a user's permissions takes effect the next time they sign in. Deleting a user revokes their access immediately.
## Areas outside the matrix
Some areas are not module-gated and are governed by role alone.
| Area | Who can reach it |
| ------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------ |
| Billing and subscription (`/billing`, plans, invoices) | **OrganizationAdmin** and **SuperAdmin** only |
| Platform pages (cross-tenant operations) | A **SuperAdmin** account that belongs to no organization — the CueManager platform operator, not your club's owner |
| **Sync issues** | Any signed-in user. Every role can create offline work, so every role can review and resolve their own |
The [Users and roles](/admin/users-and-roles) page walks through creating a staff account. Subscription and plan limits are covered in [Subscription and billing](/admin/subscription-billing).
## Branches and roles
A SuperAdmin sees every branch and can switch between them with the branch selector. Every other role is tied to the branch on their account and only sees that branch's tables, sessions, members, and reports. See [Branches](/admin/branches) for how multi-branch clubs are set up.
## Related
Create staff accounts and edit their permissions.
Per-branch tables, rates, and staff.
Owner-only plan, usage, and invoices.
What every role can do when the connection drops.