Roles & permissions
Access in Mezbano is organised by role. Store roles apply within a single store; the franchise-owner role spans a brand; and platform staff sit above both to provide support. Each role builds on the ones below it.
Store roles
Owner
The highest level of access to a store. An owner can do everything an admin can, plus the most sensitive actions — including reopening a finalized month and managing the store’s members and settings.
Admin
Runs the store day to day: recording and editing sales, expenses, labour, and purchases, finalizing a month at close, and exporting financial data. An admin cannot reopen a month once it has been finalized — that stays with the owner.
Member
The most limited store access, for team members who work inside a store without needing financial controls. Members do not finalize months or export financial CSVs.
Franchise owner
A franchise owner’s access spans every store under their brand. This role sets brand-level reference data — such as baseline ingredient costs and shared template packs — and sees across the brand’s stores. An operator with a single store simply appears as “Owner”; the “Franchise owner” label shows once a brand has more than one store.
Platform support
Mezbano platform administrators can access a workspace to help with support. That access is always recorded as impersonation, and every change made during it is attributed to the administrator — never disguised as you. See our security page for how this is logged.