Maintain the staff authority matrix
Operating matrix
Complete and approve this matrix before giving staff access. “Escalate” means the staff member may gather evidence but may not complete the change.
| Action | Front Desk | Housekeeping | Owner / Manager | Accountant |
|---|---|---|---|---|
| View arrival/departure room list | Allowed | Allowed | Allowed | As needed |
| Assign/move rooms | [set locally] | Escalate | Allowed | Escalate |
| Check in/out or record no-show | [set locally] | Escalate | Allowed | Escalate |
| Record an actual payment | [set locally] | No access | Allowed | Allowed |
| Approve refund, fee, or credit note | Escalate | No access | [set locally] | [set locally] |
| Change rates, taxes, discounts, or coupons | No access | No access | Allowed | Escalate |
| Publish customer feedback | Escalate | No access | [set locally] | No access |
| View/export financial reports | [set locally] | No access | Allowed | Allowed |
| View guest contact data | Need-to-know | Need-to-know | Allowed | Need-to-know |
Manager controls
- Create one named Joomla account per person; do not share an administrator login.
- Grant the least access required for the person’s role, then test it with that account before the first shift.
- Review access when someone changes role or leaves; remove access promptly and record who approved it.
- Recheck this matrix after enabling an add-on or changing a workflow.
Escalation rule
If a screen permits an action not authorised by this matrix, staff must stop and escalate. Interface access is not approval to change live money, availability, guest data, or published content.