Roles & permissions

OrderOps has three roles — owner, admin, member — with a permission split that matches how a real floor runs: packers ship and void, whoever closes the day manifests, and only the owner touches billing.

The three roles

• Owner — everything, including billing. The person whose card is on the subscription.
• Admin — runs the floor. Everything the owner can do, except billing.
• Member — packers and pickers. Members keep the full shipping workflow: quote, print, void and manifest. They cannot see or change billing.

The permissions behind the roles

Four permissions do the work:

• shipping:manage — quote rates, buy and print labels.
• shipping:void — void a label before it is manifested.
• manifest:manage — close the end-of-day manifest per carrier.
• billing:manage — plans, payment, the Stripe subscription. Owner-only.

Members hold the first three deliberately. A packer who misprints a label should not have to find a manager to void it, and the last person on the floor at 5pm should be able to close the manifest. The only thing a member can never reach is the money.

Signing in and the audit trail

Everyone signs in with a magic-link email — no passwords to set, reuse or leak. Store connections use Shopify OAuth. Member changes are written to the audit log alongside shipping and inventory activity, so you can always answer who did what. Inviting your team is one of the four onboarding checklist steps — do it early so real names show up in the log instead of one shared login. More on logging in Security at OrderOps.