Stokk is multi-tenant: every user belongs to a company and carries one role there. A role grants whole modules (the sidebar sections: Store Operations, Warehouse, Purchasing, Reports, Marketing, Wallet cards, Admin), and you decide which modules each role gets.
Every company starts with four roles you can rename or adjust:
You can also create your own roles, see Roles and module access.
A separate tier, platform admin, exists for Stokk staff to support tenants. It's not a role you can grant.
Anyone can reset their own password. On the sign-in page, click Forgot password?, enter the account email, and Stokk sends a reset link. The link opens a page where you choose a new password and land straight in the app. Reset links expire after a short while; if one stops working, just request a new one from the same place.
As an admin you can also send the reset for them: in Admin → Users, click Send reset link next to the person. They get an email with a link to the same page. The link works once and expires after an hour. You can still set a member's password directly from the same page if someone is locked out of their email.
On the same page, click a user's role to change it or their location. Changes take effect on their next page load. You can't deactivate or demote the company's only remaining administrator.