POS / permission management improvements

Unifying permissions for retail teams
POS and Admin user management consolidated into Settings > Users

Staff management, previously split between the POS channel and the admin, is now consolidated in one place (Settings > Users). It's now easier to pause and reactivate seasonal staff, identify high-trust roles, and assign roles across multiple stores. Existing users, permissions, and roles have been migrated automatically.

On this page
  1. What's actually changing (understand it in 30 seconds)
  2. Five new features, illustrated
  3. New high-trust POS roles
  4. Before vs. after the unification
  5. The biggest thing to watch: role management becomes an "organization-wide permission"
  6. Post-migration cleanup to do (3 steps)
  7. Five points engineers should know
  8. Three use cases you can apply to your work
  9. A one-line summary you can use in a pitch

1What's actually changing

Until now, POS users lived on the POS channel side , while Admin users lived on the admin side , managed separately.
Now, both are unified into "Settings > Users". On top of that, it's easier to pause/reactivate seasonal staff, assign multiple roles, assign roles across the organization, and identify high-trust roles.
Existing users, permissions, and roles have already been migrated automatically, so everyone keeps their current access.

Before: management split across two places

POS users in the POS channel, Admin users in the admin. Even the same person tended to have separate profiles and separate workflows.

After unification: consolidated into "Settings > Users"

Both POS and Admin in the same screen. A single user profile can handle multiple stores and multiple roles, and seasonal staff can be paused instead of deleted.

2Five new features, illustrated

① Manage POS users from the admin settings

Create POS users, assign roles, and manage PINs in "Settings > Users" instead of the POS channel.

② Assign organization-level roles

With Shopify Plus, one user profile can be granted POS access to multiple stores across your organization. No duplicate profiles needed.

③ Pausing and reactivating seasonal staff

Pause/deactivate accounts without deleting them. When staff return, reactivate them and carry over their full history.

④ Assigning multiple roles

Create custom roles that fit the job and assign as many as one person needs (e.g., "Store Manager" + "Marketer").

⑤ New high-trust roles

New POS roles make it easier to identify users with powerful permissions. All users keep their existing permissions, withone exception(→ Section 5). The role names are POS Administrator (formerly Full permissions)/POS Device Setup(for setting up new devices) /POS User Administrator(for user management) /Organization POS Administrator(create, edit, and delete roles across all stores).

3New high-trust POS roles

New role nameRoleNotes
POS Administrator Full POS permissions. Renamed Formerly "Full permissions".
POS Device Setup For setting up new devices (POS terminals). New
POS User Administrator For managing users (i.e., assigning existing roles to users). Automatically granted to anyone who previously held this permission.
Organization POS Administrator Create, edit, and delete roles across all stores. Not auto-granted Grant manually if needed (→ Section 5).
A "high-trust role" is a role that performs operations involving powerful permissions, such as closing the register, configuring devices, and managing users/roles.Made easier to identify by nameis the goal this time. It becomes easier to take stock of who holds which keys.

4Before vs. after unification

ItemBeforeAfter unification (now)
Where it's managed Fragmented POS channel + admin Centralized Consolidated under Settings > Users
POS users' PIN / role Configured on the POS channel Configured under Settings > Users in the admin
Access to multiple stores Duplicate profile per store 1 profile Grant access to multiple stores in the organization (Plus)
Seasonal staff Delete → recreate when they return (history lost) Suspend/resume Reactivate while keeping history
Roles per person Tends to assume a single-role setup Multiple roles Assign as many as needed
Creating/editing/deleting roles Shop-level permission To organization-wide permission Not granted automatically (manual required)

5Biggest thing to watch : role management is now an "organization-wide permission"

Creating, editing, and deleting roles is now an "organization-wide permission" rather than per-shop. For security reasons, this broad permission is not granted automatically. If you want someone who previously "managed roles within a single shop" to keep managing roles across all stores, you need to Organization POS Administrator manually assign the role to that person.
On the other hand,assigning an existing role to a user(not creating/editing the role itself) is still possible POS User Administrator with a role, as before. This permission has been automatically granted to those who previously had it.
Old : shop-level Creating/editing/deleting roles = self-contained within a single store Held by the store admin New : organization-wide permission Creating/editing/deleting roles is now an operation spanning all stores Organization POS Administrator ↑ Not granted automatically — manual assignment required Operational action Identify former store admins Only to the people who need it Re-grant the organization role

6Post-migration audit you should do (3 steps)

Shopify advises that "as a result of this change, you may need to review and clean up your list of users and roles." The following flow is the safe approach.

1

Review the user list

Under "Settings > Users," review your post-migration POS + Admin users together.

2

Inspect high-trust roles

Identify who holds powerful permissions like POS Administrator. Remove any unnecessary broad permissions.

3

Re-assign organization roles

Grant Organization POS Administrator only to the people who should continue managing roles across all stores.

75 points engineers should keep in mind

1. Migration is automatic and zero-downtime

Existing users, permissions, and roles are migrated automatically, and everyone keeps their current access. No migration work itself is required, but auditing the result is recommended.

Inherited Exception

2. The only exception to permission inheritance

Permissions are inherited as-is by default. The only exception is "creating/editing/deleting roles." This is promoted to an organization-level permission and, for security reasons, is deliberately not granted automatically.

3. Identity becomes organization-scoped

On Plus, a single profile can represent access spanning multiple stores. You can consolidate duplicate users across stores, but in turn a single account's blast radius grows.

4. PIN management moves to the admin

POS PIN settings have moved to "Settings > Users." Register operation manuals and onboarding materials need to have their navigation paths rewritten away from the POS channel.

API ?

5. No mention of API / automation

The official announcement is primarily about operational changes in the admin, and there isno mentionof the programmatic handling of the Admin API, webhooks, or staff permissions. If you want to manage organization-level role structures with IaC or scripts, validate the behavior separately in a sandbox. How multi-role assignment and suspended state surface in the API is also unconfirmed.

83 use cases you can apply to your operations

USE CASE 1

Eliminate "duplicate staff IDs" in multi-store Plus organizations

Problem
In a Plus organization running multiple stores, the same salesperson was registered under a separate profile per store, so every hire and departure required individual work across all stores.
Solution
Assign an organization-level role to a single user profile to consolidate access to the multiple stores where they work. Merge and retire duplicate profiles.
Result
Onboarding/offboarding becomes a single operation. Reduces the risk of missing departing employees (forgotten leftover accounts).
Technical note
Because consolidation widens a single account's blast radius, design high-trust role assignments around least privilege.
USE CASE 2

Rotate seasonal peak-period staff "history and all"

Problem
Short-term staff who only work during sales periods or year-end were deleted and re-created every season, resetting their past activity history and settings each time.
Solution
Suspend them in the off-season and re-activate them on return, keeping the account and history intact.
Result
Zero re-registration effort, continuity of training history, and the ability to trace past logs during fraud investigations.
Technical notes
Include dormant accounts in your inventory review, and set up a periodic review to decide whether to disable or delete long-inactive users.
USE CASE 3

Use the migration as a chance to run a "least privilege" audit

The problem
After years of operation, it's unclear who holds which high-level permissions. "Full permissions" has been handed out widely—a state that internal controls and audits tend to flag.
The fix
Surface high-trust permissions under the new role names (POS Administrator / User Administrator / Organization POS Administrator, etc.) and re-grant them only to the people who need them.
The impact
Satisfies the principle of least privilege and clarifies the separation of duties for till closing, device setup, and role management—reducing the cost of audit compliance.
Technical notes
Creating/editing/deleting roles is elevated to an organization permission and not granted automatically, meaningdeliberate re-granting becomes the single control point for "who is an administrator".

9One-line summary you can use in a proposal

"POS and Admin staff management is now consolidated under 'Settings > Users.'
One profile covers multiple stores and multiple roles, and seasonal staff can be paused/resumed along with their history.
Existing permissions are migrated automatically, butonly creating/editing/deleting roles is elevated to an organization permission and not granted automatically, so
right after migration, review your users/roles and re-grant the Organization POS Administrator role."