This article covers a few minor user-interface permissions — input method settings (keyboard/on-screen keyboard) and access to setting up a user's individual permissions.
You assign these permissions in Financial under Security → Groups → select a group → Permissions (set Allow/Deny per permission).
The permissions
Allow change user input method
Controls whether the user may change their personal input method setting (e.g. keyboard/on-screen keyboard), which follows the individual user.
If the permission is denied, the control for changing the setting is disabled in the user interface.
This is a user-interface setting: it controls whether the option is available.
Allow change device input method
As above, but for the input method setting that follows the device (e.g. a specific POS terminal) rather than the individual user.
If the permission is denied, the control for changing the device's setting is disabled in the user interface.
Access user permission setup
Controls whether the section for setting up a user's individual permissions is shown on the user-edit screen — that is, whether you can configure another user's personal permissions.
If the permission is denied, the section is hidden, so you cannot set up the individual user's individual permissions.
Note: This permission is a user-interface control — it controls whether the section is shown. Use it to keep the setup out of sight for employees who should not work with individual permissions.
Good to know
The two input method permissions apply to the individual user and the individual device respectively — they are separate.
By default everyone (the Everyone group) has both input method permissions.
Allow vs. Deny: An explicit Deny wins over an inherited Allow.