Rosters are about attribution
An outlet that records one set of readings a day knows what it sold. An outlet that records them per shift knows who sold it. That distinction is irrelevant on every day the numbers tie out — and those are most days.
It matters entirely on the days they do not. A ₹2,000 difference found at the close of the evening shift belongs to a named person who is still on the premises and can usually explain it in a sentence: a credit sale not written up, a UPI payment waved through, a note taken for change and not replaced. The same ₹2,000 found at month-end belongs to nobody.
None of this is about blame. It is about the window in which an explanation still exists.
Four roles, and what separates them
The useful division is not by seniority but by which records a person may create versus which they may change.
Why the last column is the whole control
If anyone can edit yesterday, then yesterday's reconciliation proves nothing — a difference can always be made to disappear rather than explained. Separating who records from who may correct is what turns a set of entries into a control, and it costs nothing to arrange.
| Role | Records during the shift | Closes the shift | May change a past record |
|---|---|---|---|
| Operator | Yes | No | No |
| Manager | Yes | Yes | Yes |
| Accountant | Yes | No | No |
| Auditor | No | No | No |
The separation that matters is the last column.
What a handover has to include
A handover that is only a change of people is not a handover. Six things, none of which take long.
- Closing meter readings on every nozzle, including any that did not run — a blank reading is indistinguishable from a nozzle nobody read.
- Testing litres dispensed and returned during the shift.
- The drawer, counted before anyone looks at what it should be.
- Digital collections totalled per channel, not pooled.
- Credit sales written up against accounts, not left for later.
- Drawer payouts recorded with a reason.
Rostering the peak, not the average
A roster built from daily volume systematically understaffs the two hours that produce the queue. Throughput at a fuel outlet is a queueing problem, and queues form at the peak by definition.
It also matters that a shift boundary does not land inside the peak. A handover done properly takes several minutes of somebody's attention, and doing it in the middle of the busiest hour is how a closing reading gets taken late — which then propagates into both the stock and the cash reconciliation for two shifts rather than one.
Turnover, and why per-person access matters
Forecourt staff turnover is high nearly everywhere. That makes shared logins the default arrangement at a lot of outlets, and it removes every benefit described above — a record attributed to a shared account is attributed to nobody.
Per-person access also makes a departure an administrative act rather than a security event. Somebody leaves, their access is removed, and nothing else changes. With a shared password, a departure either means changing it for everyone or leaving it unchanged, and outlets overwhelmingly choose the second.
Where an owner runs several outlets, the same logic extends sideways: access should be granted per outlet, so a manager at one pump has no access at another unless that is deliberate.
Frequently asked questions
How many shifts should a petrol pump run?
As many as the outlet actually trades. What matters more than the count is that each one closes properly — a two-shift pump that reconciles both is in a better position than a three-shift pump that reconciles once a day.
Should operators be able to see reports?
Not usually, and the reason is practical rather than secretive: an operator who can see the expected revenue figure before counting the drawer is confirming rather than counting. Separating the two is what makes the count independent.
What if the same person works at two of my outlets?
Grant a role per outlet rather than per person. The same individual can be a manager where they run the site and an operator elsewhere, without a single account-wide permission level that has to be set to whichever is higher.
How do I handle a shift that ends without closing readings?
Leave it open and visible rather than closing it with estimates. An unclosed shift is a task; a shift closed with invented figures is a permanently wrong record that the next day's opening readings will silently absorb.