Create workers and attach permissions

Completed

Store workers are created on the Workers page. When you create a new worker, make sure that you assign them with the following values:

  • Employment start date - The start date that is required for the system.
  • Language (on the Commerce tab) - The preferred language for the user.
  • Address book – The employee address book. The stores that are assigned the address book values for the employee will be the stores where the employee is permitted to sign in to the registers.
  • Screen layout ID - The worker-specific POS layout. This layout is used instead of any store or register layout that is assigned.
  • Name on receipt – The name of the worker as it appears on the receipt.

When creating a worker for the first time, you can set a default password for the worker and select a setting that requires the worker to change the password the first time they sign in to the POS.

On the Worker tab in the Action Pane, in the Assignment group, you can add a Worker position assignment to the worker. The primary reason for this action is to assign the worker with a position that has a job with associated POS permissions.

POS permissions

POS position permission groups are used to group a series of security configurations for a group of POS users.

Two ways to configure the POS permissions for a worker are:

  • Assign jobs or positions to a worker
  • Override on the worker

Assign jobs or positions to a worker

Creating positions for a job and assigning them to the user is the primary way that POS permissions should be assigned to a worker. A POS permission group is assigned to a Job, which is then assigned to a Position.

The worker is assigned a Position, which assigns the user with the POS permissions. Then, if that user needs elevated privileges for a specific period of time, the permissions can be overridden on the POS. The original permissions are intact on the position(s) assigned to the worker.

Override on the worker

Implementing certain operations to require manager override are configured by using the POS Operations functionality. The Manager privileges security setting is used for this action. It is also required for a user to activate an MPOS or CPOS device.

External identity

If an employee needs to activate a POS, they need to have an associated External identity. The external identity is a Microsoft Azure Active Directory (Azure AD) cloud or Azure AD on-premises account in the company’s tenant. Using the Associate existing identity functionality on the worker and then associating it with the appropriate external identity will allow the POS to activate.

This functionality can be found under Retail and Commerce > Employees > Workers.

Screenshot of the Dynamics 365 Commerce Workers page.

Commissions

Workers can be configured as sales representatives who are eligible for commission on sales in the POS. The workers are assigned to a default sales group to define how commissions are calculated. The worker’s Default group can be defaulted to a sales transactions line in the POS, if it's configured to do so in the functionality profile. The functionality can also prompt for the sales group to use it at the time of the transaction.