Published Last updated Written and reviewed by the Resale Intelligence team
On this page
Buying above Safe Buy or the limit, voiding your own or large documents, large refunds and write-offs need a second person, to catch mistakes and fraud.
Segregation of duties means the person who does a risky action shouldn't be the one who approves it. The system asks for a second person for some tasks, to catch both mistakes and fraud, and to keep evidence of who agreed.
Tasks that need a second person
| Task | A second person is needed when | The approver needs |
|---|---|---|
| Buying above Safe Buy | Always, even if the buyer holds the approval permission | Approve prices above Safe Buy |
| Buying above the limit | The price is above the store's limit, ฿30,000 by default | Approve purchases above the limit |
| Voiding a document | You recorded it yourself, or it is over ฿10,000, or older than 24 hours | Void transactions |
| Returns and refunds | You made the sale yourself, or the refund is over ฿10,000 | Accept returns and refunds |
| Writing off stock | Always | Adjust stock |
The figures are defaults. The owner can change them under Store settings on the Segregation of duties (a second approver) card; the purchase limit is Purchases above this amount need approval.
Who can approve
-
Someone other than the person doing the action.
-
An active member of this store.
-
Holding the permission in the table above and working at the action's branch.
-
With 2FA turned on, because they enter the 6-digit code from their own app.
Three ways to meet the rule
-
Approve at the counter. The approver enters their email, password and 6-digit code on the same device, right away. See Approve an action at the counter.
-
Send an approval request. For voids, returns and write-offs when no approver is around. See Send and decide approval requests.
-
Self-approve with a reason. For owners, and for stores in solo mode. See Solo mode: self-approval with a reason.
Each approval is saved together with the document in one step. If the action fails, no approval is recorded either.
What doesn't need a second person
-
Lowering a customer's risk from High risk or Do not transact doesn't need a second person, but it does need the Change customer risk level permission.
-
Changing pricing controls, the purchase limit and the discount cap is for owners only.
-
Undoing an import uses the batch rollback, which keeps its own record.