Two separate systems: regular admin users (managed under Users > Profiles) get standard admin permission checkboxes like List POS Devices/Edit POS Devices (to manage the setup screens covered in this article) and Customer Orders-style permissions (to view/edit checkouts from the admin side). Employees who sign in on the POS terminal with a login code instead get a distinct POS-only permission set — Point of Sale, Can Checkout, List Transactions, List Orders, Change Order Status, Refund Transactions/Orders, List Customers, Edit Customers, Open/Close Drawers, List Drawers, Edit/View Drawers Details, View Sales Reports — assigned through their Employee Role (Employee Roles/Profiles screen), which is what actually shows/hides sections inside the terminal itself.