Hi,

In Odoo 15 Community, you want cashiers to be able to register payments on customer invoices but not to create invoices. By default, Odoo does not provide such a restricted role. The standard Billing group allows both creating invoices and recording payments, while the Accountant group has full access to all accounting features. This means you need to adjust access rights to enforce the restriction.

The first way to handle this is by modifying the access rights of the existing Billing group. You can activate Developer Mode and navigate to Settings → Technical → Security → Access Control Lists (ACLs). There, you locate the model account.move, which is used for invoices and journal entries. For the Billing group (or whichever group your cashiers belong to), you can remove the Create permission while keeping Read and Write enabled. This ensures that cashiers can still view invoices and register payments, but they will no longer be able to create new invoices.

A cleaner solution is to create a dedicated Cashier group. You can duplicate the existing Billing group, rename it “Cashier,” and then remove the Create access for invoices (account.move). This allows you to assign the new role specifically to cashier users. Meanwhile, the Billing group can remain for users who need to create invoices, and the Accountant group retains full accounting access. This approach gives you a clear separation of responsibilities: cashiers handle payments, billing staff handle invoices, and accountants manage the full set of financial operations.

With this setup, cashiers can open invoices and record payments without having the ability to issue invoices themselves. The system remains secure, user-friendly, and aligned with the principle of separation of duties in financial management.

For more information,

* https://www.youtube.com/watch?v=m22CrOCzqMI

* https://www.youtube.com/watch?v=69kiN2FZ3ag

* https://www.cybrosys.com/blog/how-to-set-access-rights-in-odoo-17-accounting

* https://www.odoo.com/documentation/18.0/applications/general/users/access_rights.html

Hope it helps.