Team and staff

Two different groups of people can appear against your business, and Musqet keeps them apart because they do different jobs.

Team members have a login. They sign in to the dashboard, on the web or in the merchant app, and what they can see and do there is set by their role. Use the team for the people who help you run the business.

Staff members do not have a login. They are the till roster: the names on a shared card machine or phone till, each with their own PIN, so a sale can be recorded against whoever served it. Use the roster for the people serving customers.

Someone can be both, but they are set up separately, in two different places. The rest of this page takes the team first, then the roster.

Team members

Your team is on the Team page in the dashboard. Every member has a role, and every role decides what they can reach.

Inviting someone

Open Team, choose to add a member, and enter their email address and a role.

What happens next depends on whether they already use Musqet:

They already have a Musqet account. They are added to your business straight away and can switch to it the next time they sign in. No email is sent.
They are new to Musqet. They get an email with a link to a Finish your account page, which shows your business and the role you gave them. They set their name and a password, which also confirms their email, and are signed straight in. The link is good for seven days. Until they finish, they show as pending.

You can send an invitation from the merchant app as well as the web. Changing roles, fine-tuning permissions and removing people are done in the web dashboard.

The roles

You assign one of two roles from the dashboard, and they are deliberately simple.

Role	What they can do
Owner	Everything. The full run of the dashboard, including the team, devices, withdrawals and settings
Cashier	Take payments, see sales, and view the business tip links. A cashier cannot manage the team, devices, withdrawals or settings, and cannot create or delete tip links

Most businesses run with one or two owners and add cashiers for everyone else, then adjust individual permissions where a particular person needs a little more or a little less.

Two more roles come from apps that use your Musqet account, such as Bitcoin Rewards, and show on the Team page alongside the others:

Role	What they can do
Admin	Manage the team, and nothing else. An admin opens your business in the dashboard and sees Team and their own account, but no sales, devices or card pages
Employee	Nothing in the dashboard. An employee is someone the app pays, so the business is not listed for them

An admin manages cashiers and employees only. Inviting, changing or removing an owner or another admin is for an owner, and so is giving someone a permission their role does not include. An admin can still take an extra permission away.

An admin’s or employee’s role is set by the app that added them, so the dashboard does not offer to change it. An owner can still remove them.

Fine-tuning what a member can do

A role is a sensible starting point, not a cage. On top of the role you can grant an individual permission a cashier would not normally have, or remove one the role would normally include. Each permission is listed in the portal with a plain-English label, so you are ticking “see the sales report” rather than a code.

Two rules keep this safe:

An owner cannot be fine-tuned. An owner already has everything, so there is nothing to add and nothing you are allowed to take away.
You cannot grant a permission the role already gives, or remove one it does not have. The portal only offers you the changes that actually mean something.

Changing a role

Open a member from the Team page and change their role. Two changes are blocked, to stop you locking your business out of its own dashboard:

You cannot change your own role. Ask another owner to do it.
You cannot demote the last owner. A business must always have at least one owner, so if there is only one, promote someone else first.

Removing a member

Removing a member takes their dashboard access away immediately. As with roles, you cannot remove yourself, and you cannot remove the last owner.

Resending an invitation

If someone missed their invitation or let it lapse, open them from the Team page and resend it. This works only while they are still pending: once they have accepted and verified their email there is nothing to resend. There is a short cooldown between sends, so if you have just sent one, wait a little while before trying again.

Staff members

Staff members are your till roster. A staff member is a name and a number on your business, not a login, and the number is what identifies them at a shared till. You manage the roster on the Staff members page in the dashboard.

Adding a staff member

Open Staff members and add one with their name. You can also set optional refund limits and staff permissions at the same time (see Refunds and till permissions).

When you add someone, Musqet gives them a temporary PIN, shown to you once. They must set their own before their first sale. Their number is assigned for you, counting up as you add people.

The staff PIN

A staff member proves who they are at the till with a PIN. By default this is a four-digit code. Some businesses use an eight-character alphanumeric password instead; that is a per-business setting. The same credential is what a staff member enters to authorise a refund, so a member of staff has one code to remember, not two.

The PIN is created on your own device and Musqet never sees it or stores it. What Musqet keeps is a verifier derived from the PIN, never the PIN itself, so a PIN cannot be looked up or emailed back to anyone. If a staff member forgets it, it can only be reset, which issues a new one. This is why the PIN is shown to you exactly once when it is created.

Resetting a staff password

Open a staff member from the Staff members page and reset their password. Musqet issues a fresh temporary PIN, shown once, which they change to their own at the till. Resetting also clears any lockout the staff member had, so a reset is the single step that gets a locked-out, forgotten-PIN member of staff working again.

Unlocking a staff member

Too many wrong PIN attempts lock a staff member out for a while. The lockout lengthens each time it happens:

Wrong attempts	Locked out for
5	5 minutes
10	30 minutes
15	2 hours

You do not have to wait it out. Open the staff member and unlock them to clear it at once.

Signing in at the till and authorising a refund are counted separately, so fumbling a PIN at the till never locks that person out of giving refunds, and the other way round. Unlocking, and resetting the password, both clear the lot.

Clocking in and out

On a shared till, a staff member clocks in by signing in with their PIN at the start of their shift, and clocks out at the end. Clocking out matters: it stops later sales on that till being recorded against someone who has gone home. If nobody clocks out, the next person simply signs in over the top.

Attributing sales to staff

On a shared till, each sale is recorded against whoever is clocked in on that device. Musqet works this out on its own side from the sign-in, so there is nothing to pick per sale and no way to put a sale under the wrong name by mistyping.

Two things are worth knowing:

Attribution never holds up a sale. If nobody is clocked in, or the device is a personal one rather than a shared till, the sale still goes through; it is simply left unattributed. A busy till never waits on this.
It needs a shared till. Sales attribution is a shared-device feature. On a personal device there is no roster to attribute to.

Where a staff member is attributed, their name appears against the sale in your transactions.

Refunds and till permissions

Whether a staff member may give refunds, the password they enter to authorise one, and any per-transaction or daily refund limit, are all part of refunding at the till. They live on the Refunds page rather than here:

Refunds covers the refund password, allowing a staff member to refund, and setting refund limits.

Staff members can also be given access to the end-of-day report from the roster.

If you cannot find these

The team and the staff roster are each switched on per business. If you do not see Team or Staff members in your dashboard, they may not be enabled for your account yet. Contact support and we will turn them on.

Troubleshooting

What you see	What it means	What to do
The invitation never arrived	The address was wrong, or the email was filtered	Check the address on the Team page, then resend it
The invitation has expired	Invitations are good for seven days and work once, and a resent invitation replaces the earlier link	Resend it from the Team page. If they already finished their account, they sign in as normal
It will not let you change your own role	You cannot change your own role	Ask another owner to change it for you
It will not let you remove the last owner	A business must keep at least one owner	Promote another member to owner first, then make the change
A new team member cannot see everything	Their role, or a removed permission, is narrower than yours	Open them on the Team page and adjust the role or the individual permissions
An admin only sees Team	That is the admin role: it manages the team and nothing else	If they need more, an owner changes their role
”Only an owner can manage owners and admins”	Someone other than an owner tried to invite, change or remove an owner or admin	Ask an owner to make the change
”Only an owner can give a member extra permissions”	Someone other than an owner ticked a permission the member’s role does not include	Ask an owner to grant it
A staff member is locked out at the till	Too many wrong PIN attempts	Unlock them from the Staff members page, or reset their password, which also unlocks
A staff member has forgotten their PIN	A PIN cannot be recovered, only reset	Reset their password from the Staff members page and give them the new one
No staff member is named against a sale	Nobody was clocked in, or the till is a personal device	Have staff clock in on the shared till at the start of a shift
The wrong staff member is shown against a sale	The previous person did not clock out	Clock out at the end of each shift, or clock in over the top before the next sale