Loyalty Club has two main role types per partner business: ClientUser (the owner who signed up) and ServerUser (staff added via the Add Server flow). Their access to the portal is shaped by what their Settings menu shows.
ServerUser (staff) — settings menu
Per Settings.jsx, staff see only these settings sections:
- Password & Security
- Privacy Policy
- Delete Account
What they can do beyond settings:
- Sign in to the partner mobile app and the partner web portal.
- Use the scanner to scan member QRs.
- Apply Stamp / Place Order / Redeem Coupon at the till (per the scanner page).
What they can’t do (because the relevant settings sections aren’t in their menu):
- Edit the business profile.
- Add or remove other staff.
- Create / edit / pause / delete campaigns.
- Manage subscription / billing.
- Manage Google Reviews / Edit Profile Page / Postcode Sectors / Location.
ClientUser (owner) — settings menu
The owner sees the full Settings menu:
- Profile
- Postcode Sectors
- Social Links
- Location Settings
- Google Reviews
- Edit Profile Page
- Classified Ads
- Password & Security
- Manage Subscription (gated by
hideElementsflag) - Privacy Policy
The owner doesn’t have a Delete Account option in Settings — that’s only in the ServerUser menu.
What we don’t document at v1
- Per-staff custom permissions / per-campaign scoping — there’s no UI for this; the role is binary (ClientUser vs ServerUser).
- Multiple owners per business — at v1 there’s one owner.
- Ownership transfer — not exposed via Settings; handle via support if needed.
In one sentence
Staff (ServerUser) = scan + apply stamps + minimal settings (password, privacy, delete-account). Owner (ClientUser) = full settings + business management + billing.