Default station permissions (also called default tablet permissions) control what a POS or KDS tablet can do when nobody is signed in with a passcode. They apply to the tablet itself, not to any one staff member.
How default station permissions work
Every Owner POS tablet has its own device login (set up with a location code). On top of that, an individual staff member can sign in with their four-digit passcode to add their personal permissions.
Default station permissions are what the tablet can do on its device login alone, that is, before or without anyone entering a passcode. They are set per location.
Require Passcode OFF: anyone using the tablet gets the location's default station permissions. No personal login is needed.
Require Passcode ON: staff must enter their passcode, and the tablet uses that person's job permissions instead of the defaults.
ℹ️ Note: Require Passcode is a per-station setting in POS Settings › Station › Access. Changes to default station permissions take effect the next time the tablet loads its permissions.
What's included by default
Out of the box, a location's default station permissions include:
Use checkout
Use the Kitchen Display System (KDS)
Adjust order fulfillment and prep times
Discount orders
Void orders
Refund or charge orders
Manage stations
Manage cash drawers
Use time clock
Edit menus
Edit store settings
Also included by default (nothing is locked out of the box):
View reports
Manage billing
Manage users and jobs
Manage gift cards
Manage shifts
Manage marketing, website, and customers
Manage payouts, disputes, and fee settings
The default set grants every public permission group, so nothing is locked until someone changes it. To limit what an unattended tablet can do, uncheck the groups you don't want under Tablet permissions for that location, using the steps below.
Configure default station permissions
You set default station permissions per location in the Owner Dashboard.
Log in to the Owner Dashboard at dashboard.owner.com.
Click Settings in the left-hand navigation.
Click Stations and tablets.
Click Tablet permissions.
Check or uncheck permission groups to choose what tablets can do without a login.
Click Save. Changes apply the next time the tablet loads its permissions.
⚠️ If a tablet doesn't reflect the permissions you set, it may be on an older setup that can still default to broad, near-admin access. Turning on Require Passcode for the station is the reliable way to enforce per-person permissions.