Temporary and part-time POS staff

Temporary staff can ring sales on a Point of Sale role — leave Manage orders at all locations off, then re-check it

Direct answer. Yes, temporary or part-time staff can process sales without a store-wide order list: create a custom Point of sale role, set Manage orders at all locations to Denied, and assign that role to a Point of Sale user. Shopify documents Denied as “staff can manage only the orders that were made at the device’s location,” not as a hide-history or “today only” switch. They still see that location’s past orders. Confirm the live Help Center pages; Shopify can change labels. This page is not legal advice and not a privacy attestation.

Keep a 30/90-day reminder to reopen this temporary POS role — Staff Access Audit Guard.

Staff Access Audit Guard reviews installed-app access, granted scopes, staff access records, and ownership evidence without reading customer or order data. It flags protected customer-data and broad-write access and tracks staff access with 30/90-day review reminders. It does not read POS permission checkboxes, change POS roles, or hide order history. Use the reminder to reopen the temporary role. This page is the setup and re-check — not the missing-permission explainer and not the leftover-admin score.

What you are setting up

In the Shopify Community thread Feature Request: Restrict Access to Order History in Shopify POS Pro, QicoBay (10 October 2026) asked for a permission so temporary or part-time staff can check out without browsing historical orders, including orders from their own location. hizachlee (12 October 2026) wrote that there isn’t a permission for that yet, and that a custom role with “Manage orders at all locations” set to Denied and “Return and exchange orders” turned off still leaves that location’s order history visible. QicoBay then asked for a limit to today’s or the last few days’ orders. The thread has no Shopify staff reply.

Why that role still matters: Help Center’s Point of Sale permissions table splits “manage orders everywhere” from checkout. Denying the broad order permission does not turn off ringing a sale. The gap — no hide-history row and no date range — is hide past POS order history from temporary staff. How POS roles differ from admin staff permissions is Shopify POS staff permissions.

Help Center’s Role categories page says POS roles and POS-only staff are available when the store has the Point of Sale channel and at least one location on the Shopify POS Pro subscription. Understanding Shopify POS staff management says a POS role applies at POS Pro locations, and that POS roles do not apply on POS Lite locations. This page does not compare subscriptions and does not list prices.

1. Create the temporary Point of Sale role

Managing roles documents the create path. You assign a role; you do not attach individual POS permissions to one person.

1. From Shopify admin, go to Settings > Users.
2. Click Roles, then Add role.
3. Select the Point of sale role category. A role has one category, so this role cannot also hold store-admin permissions.
4. Name it something you will search for later, such as Temporary cashier, and describe who it is for.
5. Set the permissions in the next section, then click Save.

Do not edit a Shopify-managed role. Help Center says those cannot be modified. If a custom manager role is close, Actions > Duplicate, rename the copy, then turn the broad permissions off on the copy.

2. Permissions to leave off

On that Point of sale role, set these to Denied. Labels are from the Point of Sale permissions table.

• Manage orders at all locations — Denied. Staff manage only orders made at the device’s location. Allowed lets them manage orders regardless of the device’s location.
• Switch device’s location — Denied. Otherwise the location limit is easy to step around.
• Return and exchange orders — Denied, unless this person should refund. Also leave Denied the return rows beside it if they are shown: Return ineligible items, Create unverified returns, Complete in-progress returns, Manage item restock, Remove unfulfilled items, and Cancel.
• Manage draft orders — Denied. Help Center says denied staff cannot access draft orders created in admin, or view, retrieve, and edit draft orders from other retail locations.
• Fulfill shipping and pickup orders and Reassign or cancel fulfillment — Denied, unless this shift fulfills pickup or reroutes orders.
• View analytics for device’s location and View payment tracking session history — Denied. Those are sales and register history, not the cart.
• View customer details and View abandoned checkouts — Denied if the job does not need the customer’s email, phone, shipping address, or online cart.
• Manager approval — Denied. Temporary staff should not approve someone else’s restricted action by PIN.

Leave ordinary checkout available. Help Center does not list a separate “process sale” permission, and denying Manage orders at all locations does not, by itself, block a sale at the device. Leave Add custom sales, Apply custom discounts, and Apply discount codes Denied unless this person should change the price. Discount and refund approval is covered on POS roles vs admin staff permissions.

3. Assign a Point of Sale user, not an admin user

Inviting users documents two account types. An admin user can hold a POS role and a store role. A Point of Sale user can hold only POS roles, uses a PIN, and does not need an email. Help Center’s staff-management page says POS app-only staff do not have access to Shopify admin or the Point of Sale channel, and that someone with admin access can still view analytics and location details there.

1. Go to Settings > Users and click Add users.
2. In User details, select Point of Sale user (not Admin user).
3. Enter the first and last name, then click Add. Shopify generates a PIN.
4. Under Roles or Roles and groups, click Assign and select the temporary Point of sale role only.
5. Tell the person the PIN, then click Save.

Assigning a retail location limits where that PIN can sign in. Help Center says it does not hide inventory at other locations, and that orders from other locations still require Manage orders at all locations. If this person must be an admin user, do not also assign a store role that includes Orders. A tight POS role does not remove admin order access.

4. Verify on the register

1. Sign in on the device with the temporary PIN, at a location where the POS role applies.
2. Ring a test sale the way this person will, and confirm checkout still completes.
3. Open orders. A known order from another location should not be manageable. An older order from this device’s location should still be visible. That remaining history is expected — see the hide-history gap.
4. Try a return and a device-location change. Both should be denied if you left those permissions off.
5. If the account is an admin user, sign in to Shopify admin as that user and confirm Orders is not granted by a store role.

5. List the roles that are still broad, then set a 30/90-day reopen

The native list of risky POS roles is in Shopify, not in an app:

1. Go to Settings > Users > Roles and open every Point of sale role, including copies of manager roles.
2. Write down any role that still has Manage orders at all locations set to Allowed, and any temporary person who is an Admin user.
3. When the shift block ends, suspend or remove that user. Shopify does not store an end date on the role. Removal is set an end date on staff or collaborator access.

Staff Access Audit Guard is the reopen habit for the people and the apps. It lists staff access records and granted scopes, flags protected customer-data and broad-write access, and tracks 30/90-day review reminders. It does not open the POS permission table, so it will not show “Manage orders at all locations” for you. An overdue reminder does not suspend anyone — that distinction is 30/90-day review reminders vs collaborator expiry.

Use the staff list to see who still has a login after the season. Use the scope list for a second path to historical orders: installed apps with read_orders or read_all_orders. What those scopes cover is Shopify app access scopes. The audit app itself does not read customer or order data.

At 30 days and again at 90 days, reopen Settings > Users > Roles, confirm the temporary role is still Denied on the list above, and confirm seasonal people are still Point of Sale users. Then suspend anyone whose shifts have ended.

Install Staff Access Audit Guard

What this page is not

• Not a claim that Shopify can hide this location’s past orders or limit history to today. That limit is still a feature request.
• Not the leftover Admin access score. That URL is staff permissions audit checklist.
• Not legal advice, a privacy attestation, or employee monitoring.
• Not a subscription comparison, and not a price.

Related pages

• Hide past POS order history from temporary staff — the missing permission, not these setup steps
• Shopify POS staff permissions — POS roles vs admin permissions
• 30/90-day review reminders vs collaborator expiry
• Set an end date on staff or collaborator access
• Shopify app access scopes — read_orders and read_all_orders
• Staff access review checklist generator
• Shopify Community thread 695367
• Point of Sale permissions
• Managing roles
• Inviting users
• Shopify apps hub

Review staff access and app scopes on a 30/90-day cadence, including this temporary role — Staff Access Audit Guard.

Not legal advice. Not a privacy attestation. Confirm the live Help Center pages before you treat a role as hiding past orders. The app reviews access you already granted. It does not change POS roles or hide order history. This page does not list prices.