Inviting team members
Invite staff to your Zillo store from Team settings. Each member has a role — owner, admin, or staff — that controls what they can do. Owners have full access; admins can do most day-to-day operations; staff are limited to operational tasks like fulfilling orders and using the mobile app.
Inviting team members
Invite staff to your Zillo store from Settings → Team. Each member has a role — owner, admin, or staff — that controls which dashboard sections they can reach. Owners have full access; staff are limited to day-to-day operations.
Send an invite
- Open Settings → Team.
- Click "Invite member".
- Enter their email and pick a role.
- Submit. Zillo sends them an email with a link to set their password.
- They click the link, set a password, and they're a full member — ready to sign in immediately.
The invitation email is sent from your store's email address (if you've set up a custom sender) or Zillo's default. Once they accept, they can sign in to dashboard.zillo.app the same way you do.
What each role can do
| Action | Owner | Admin | Staff |
|---|---|---|---|
| View dashboard | ✓ | ✓ | ✓ |
| Manage products | ✓ | ✓ | — |
| Process refunds | ✓ | ✓ | — |
| Invite or remove team members | ✓ | — | — |
| Connect Stripe and configure payouts | ✓ | — | — |
| Use the mobile app | ✓ | ✓ | ✓ |
| Settings → Domain, Payments | ✓ | — | — |
| Settings → Storefront branding | ✓ | ✓ | — |
The mobile Redeem tab works for everyone — scanning gift cards and check-ins is an operational task, not a configuration one.
Use Staff for venue floor / event door / register staff. Reserve Admin for team leads who manage product operations day to day. Keep Owner tight — typically just the business principal — because owners can connect or disconnect Stripe.
Two-factor authentication
Every team member can turn on 2FA from Settings → Account:
- Click "Set up 2FA".
- Scan the QR code with an authenticator app (Authy, 1Password, Google Authenticator).
- Enter the 6-digit code to confirm.
- Save your backup codes — 8 single-use codes you can use if you lose access to your authenticator app.
After setup, every sign-in requires the 6-digit code from the authenticator. Backup codes work in place of the authenticator for emergency recovery.
Lost both your authenticator and your backup codes? Email Zillo support from the email address on file with proof of identity. There's no self-service "I lost my codes" recovery — that would defeat the point of 2FA.
Removing a member
Click the member's row in Settings → Team and click Remove from team. Their access to your store is revoked immediately. They can still sign in to Zillo with their email but they won't see your store in their account list.
Their historical activity (refunds processed, check-ins logged, products created) stays in your data for the audit trail — only their ongoing access is removed.