Right now, it appears that the ability to edit products, SKUs, services, and other operational settings requires granting “Manage Business” access through the gear icon. The problem is that this also gives the staff member access to areas they should not control, including the ability to edit permission groups and potentially change their own or other users’ privileges.

For our practice, this creates a real internal-control and security issue. We need to delegate operational setup tasks to trusted managers — for example:

Creating and editing products
Adding or editing SKUs
Managing inventory-related product details
Creating and editing services
Updating service settings

But those same users should not be able to:

Edit permission groups
Change their own permissions
Change another staff member’s permissions
Modify owner/admin access
Access sensitive business-wide security settings

My requested feature is to separate these into distinct permissions, for example:

Manage Products / SKUs
Manage Services
Manage Inventory Settings
Manage Staff Permissions / Permission Groups

Ideally, “Manage Staff Permissions / Permission Groups” should be its own high-level permission that only owners/admins can grant. Non-admin staff should not be able to elevate their own access or modify other people’s access simply because they need to maintain products, SKUs, or services.

This would allow business owners to delegate day-to-day operational work without compromising security or access control.

It would also be helpful if Boulevard added safeguards such as:

Preventing users from editing their own permission group unless they are an owner/admin
Preventing non-owner users from changing owner/admin permissions
Audit logs showing who changed permissions and when
More granular “gear icon” permissions so users can access only the specific settings they need

This is important because product, SKU, inventory, and service maintenance are normal manager-level responsibilities, but staff access control is an owner/admin-level responsibility. Combining them forces business owners to choose between operational efficiency and security.