Skip to Content

POS Manager Approval | Odoo Point of Sale PIN, Card and Authenticator OTP Approval

July 15, 2026 by
CODEerts

Require a manager PIN or password, a printed QR/barcode card, or an authenticator app code (Google or Microsoft Authenticator) before a cashier can refund, discount, delete a line, change a price or quantity, void an order and more in the Odoo Point of Sale. PIN and card are verified offline at the register too.

POS Manager Approval adds the control most shops want on the Odoo Point of Sale: a manager has to sign off before a cashier can do the risky things. Refunds, discounts, deleting a line, changing a price, voiding an order and more can each be locked, and the register asks for a manager the moment a cashier reaches for one. The result is fewer unauthorized discounts and refunds, and a clear record of every override.

What it does

You decide which actions need approval and switch them on per Point of Sale. When a cashier triggers a gated action, the register shows a manager prompt and the sale only continues once a manager approves. A manager can approve three ways: their POS PIN or password, a printed QR or barcode card they scan, or a six-digit code from Google Authenticator or Microsoft Authenticator. PIN and card are verified offline at the register, so the gate still works when the connection drops, while the authenticator code is verified on the server where the secret never leaves. You set a default method and the approver can switch to any other enabled method at the prompt, and any of the Point of Sale's authorized managers can approve.

Each manager sets up their own authenticator from their user Preferences by scanning a QR, so there is no administrator round-trip and no shared secret. An offline policy lets you either allow the offline-capable methods while the register is disconnected or block the gated actions until it is back online. Every attempt, allowed or denied, is written to an audit log with the manager, the action and the method, and the authenticator checks are rate-limited and replay-protected. All of it is configured per Point of Sale, so your other registers keep the standard behaviour.

Key features

  • Manager approval in front of refunds, discounts, line deletes, price and quantity changes, voids and more
  • Ten gatable actions, each switched on or off per Point of Sale
  • Three methods: manager PIN or password, a printed QR/barcode card, or an authenticator app code
  • Google Authenticator and Microsoft Authenticator supported with standard time-based codes
  • PIN and card verified offline at the register; authenticator verified on the server, secret never leaves it
  • Choose a default method; the approver can switch to any other enabled method at the prompt
  • Any of the Point of Sale's authorized managers can approve
  • Self-service authenticator setup on the manager's own Preferences, by scanning a QR
  • Offline policy: allow offline-capable methods when disconnected, or block gated actions
  • Full audit log of every attempt: who, which action, which method, allowed or denied
  • Rate-limited and replay-protected authenticator checks
  • Configured per Point of Sale, so other registers are untouched

Who it's for

Any shop, cafe, restaurant or counter on the Odoo Point of Sale that wants a manager to sign off on refunds, discounts, price changes and voids. It suits owners who want to stop unauthorized discounts at the till, teams that need an audit trail of overrides, and registers that run through internet drops, where the offline PIN and card approvals keep the gate working. Managers who prefer a phone code instead of a PIN can use their own authenticator app, set up in a minute from their Preferences.

Frequently asked questions

How do I require a manager to approve refunds or discounts in the Odoo POS?

Turn on authorization for the Point of Sale, then tick the actions that need sign-off, such as Refund and Line Discount. When a cashier triggers one, the register shows a manager prompt and the action only proceeds after a manager approves with their PIN or password, a scanned card, or an authenticator code.

Which approval methods are supported?

Three: a manager PIN or password, a printed QR or barcode card the manager scans, and a six-digit authenticator code. You enable the methods you want per Point of Sale and choose which one is offered first; the approver can switch to any other enabled method at the prompt.

Does it work with Google Authenticator or Microsoft Authenticator?

Yes. The authenticator method uses the standard time-based codes that Google Authenticator, Microsoft Authenticator and similar apps generate. Each manager enrols once by scanning a QR from their own user Preferences, and the secret is kept on the server and never sent to the register.

Do approvals work when the Point of Sale is offline?

PIN and card approvals are verified right at the register, so they keep working with no connection. The authenticator code is checked on the server and needs a connection. An offline policy setting lets you either allow the offline-capable methods while disconnected or block the gated actions until the register is back online.

Which POS actions can I lock behind a manager?

Refund or Return, Line Discount, Delete Line, Manual Price Change, Quantity Change, Void or Delete Order, Change Customer, Reprint Receipt, Cash In or Out, and Close Session. Each one is switched on or off independently for the Point of Sale.

How does a manager set up their authenticator code?

If their employee is an authorized manager on a Point of Sale, a Set Up Authenticator button appears on their own Change My Preferences screen. They scan the QR with their authenticator app and confirm a code once. No administrator has to handle the secret.

Is there a record of who approved what?

Yes. Every approval attempt is written to an audit log with the manager, the action, the method used and whether it was allowed or denied, so you can review overrides on refunds, discounts and voids later.

Which Odoo versions does this module support?

Use the version selector at the top of this page to pick your Odoo release. Each branch is published as its own listing for that exact version.

Want this in your Odoo?

See the full feature list and screenshots, or talk to our certified Odoo team about setup and customization.

Partner Code: Customer & Vendor Reference Numbering | Odoo Contact Code Sequences