Seven roles, one account per person

Everyone signs in with their own account. Their role determines what they see and what they can do; no account is shared.

The seven roles

Admin
Admin of the Organisation. They manage the Clubs, the accounts and the settings, see every Club separately, consolidated and compared, and check the consistency of what has been entered.
Club Manager
Fills in and signs off their Club's Daily report every morning. Their deputy holds exactly the same role.
Operations
The operations team records takings and bank deposits, runs the phone line, follows Google reviews, publishes posters and handles the network's requests.
Accounting
The internal accounting team follows revenue, unpaid invoices, supplier invoices and the budget.
Cleaning quality inspector
Carries out cleaning Inspections, opens Corrective actions and produces the reports handed to the Cleaning contractor.
Accounting firm
The Accounting firm reads and downloads the documents for the period of their choice. They cannot change anything.
Cashier
At the Club front desk, they see the point of sale Order queue of their Clubs and charge Orders on the card reader. They have no access to the catalogue or the settings.

One role per Membership: Permissions follow the role, not the person, and the Admin assigns them without ever handling a password.
Club scope: An account only sees the Clubs it is attached to; the Admin sees every Club in the Organisation.
Two-step verification: Required for the Admin and the Accounting firm, available to every other role.
Traceability: Creation, change and sign-off are logged, with author and timestamp.

There is no self-service sign-up: the Organisation's Admin creates the accounts and sends the Invitations.