Who on my team is allowed to change stock and ingredients?

The owner and any manager login. Everything of consequence is written to your change log with who did it and when, so a stock take, a wastage record, a received delivery or a cancelled order all name a person. If several people touch stock, give them their own manager logins rather than sharing one.