Giving staff the right access without oversharing numbers
Giving staff the right access without oversharing numbers is a problem every owner hits the moment the business outgrows one till. You need the closing barista to record tonight's takings — but you don't need them browsing every location's turnover, your margins, or what the other shop made last Saturday. Get this wrong in either direction and you pay for it: too tight and people can't do their jobs, too loose and your commercial numbers walk out the door with anyone who quits.
The answer isn't trust or suspicion. It's scope — deciding, deliberately, what each role needs to see and do, and nothing more.
Separate "enter" from "see everything"
The core mistake is treating access as one switch: either someone's in the spreadsheet or they're not. But entering a number and reading the whole business are completely different rights. A closing employee needs to write their location's daily figures. They almost never need to read the cross-location totals that only make sense to an owner.
Split access along that line and most of the tension disappears:
- Owner — sees everything, every location, all the totals.
- Employee — enters and reviews their own location's day, and sees nothing beyond it.
Scope by location too, not just by role, so a person working one shop can't read another's numbers.
Scope to the location, not just the person
A role alone isn't enough in a multi-location business. "Employee" at the Wilda café shouldn't unlock the Kampus shop's figures. Access should be the intersection of who you are and where you work — this person, at this location, can enter this location's day. When staff move between sites, their access should follow them, not accumulate.
Why oversharing is a quiet risk
Owners rarely oversee access out of carelessness — they do it because a spreadsheet has no in-between. Once you share the file to let someone enter Monday's total, they can see every tab, every location, every historical figure. Nothing technical stops a curious glance or a screenshot on the way out. The risk isn't dramatic theft; it's the slow normalising of everyone knowing everything, until commercial information has no walls at all.
How Operly helps
Operly builds this split in from the start. Employees get a screen for entering their own location's daily numbers, counts, and closes — and that's all they see. The cross-location dashboard, the totals, the comparisons between shops are owner-only. Someone entering Tuesday's takings at one café simply has no path to another location's figures, because the access is scoped to their role and their location together.
That means you get complete, timely numbers from every location without handing out the keys to the whole business. When a member of staff leaves, there's no shared file full of everything to claw back — they only ever had the door to their own location, and closing it is instant.
Decide what each role genuinely needs, split "enter" from "see everything," and scope access to the location as well as the person. Done once, it lets your team do their job fully while your commercial numbers stay where they belong — with you.