D365 FO has a provision to define what operations can be performed by cashiers in POS and what operation requires manager privileges.

If an operation (like a manual discount) requires manager privilege, the system pops up a login window for the manager to log in (approve) so that the cashier can perform that operation.

The manager details who approved the operation are not captured in the POS transaction. This is required for audit purposes.