...
Some objects (e.g. ATTRIBUTE, BRAND) are system shared objects and thus require a system admin role in order to manipulate the data.
Authorization
| Functional Area | Role Required | Notes | ||
|---|---|---|---|---|
User Management | ||||
| View users | ROLE_SMADMIN, ROLE_SMSHOPADMIN | filtered by shop access | ||
| Create/Update/Delete user | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access to at least one shop assigned to user | ||
| Grant/revoke roles | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access to at least one shop assigned to user. ROLE_SMADMIN can be granted/revoked only by another ROLE_SMADMIN | ||
| Update/Reset password | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access to at least one shop assigned to user | ||
| Role management | ROLE_SMADMIN | |||
Attribute Management | ||||
| View attributes | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |||
| Create/Update/Delete attribute | ROLE_SMADMIN | |||
| View attribute groups | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |||
| Create/Update/Delete attribute groups | ROLE_SMADMIN | |||
| View attribute types | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |||
| Create/Update/Delete attribute types | ROLE_SMADMIN | |||
| View product types | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |||
| Create/Update/Delete product types | ROLE_SMADMIN | |||
Shop management | ||||
| View shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Create shop | ROLE_SMADMIN | Cloud users will have shop created via cloud registration | ||
| Update shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| View shop currencies | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Update shop currencies | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| View shop shipping/billing countries | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Update shop shipping/billing countries | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| View shop urls | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| Update shop urls | ROLE_SMADMIN | |||
Catalog management | ||||
| View categories | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | filtered by shop access | ||
| Create category | ROLE_SMADMIN | |||
| Create category for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Update category | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Remove category | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| Assign/Unassign to shop | ROLE_SMADMIN | Cloud users use "Create category for shop" and "Remove category" | ||
| View products/SKU | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | filtered by shop categories | ||
| Create/Update/Delete product/SKU | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop category access | ||
| View product associations | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop category access | ||
| Create/Update/Delete product associations | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop category access | ||
| Create/Update/Delete SKU price | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop category access | ||
| View Tax configurations | ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |||
| Create/Update/Delete Tax configurations | ROLE_SMSHOPADMIN | |||
| View brands | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |||
| Create/Update/Delete brands | ROLE_SMADMIN | |||
Content management | ||||
| View content | ROLE_SMADMIN, ROLE_SMCONTENTADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access | ||
| Create content root | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| Create/Update/Delete content | ROLE_SMADMIN, ROLE_SMCONTENTADMIN | requires shop access | ||
Marketing management | ||||
| View prices | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Create/Update/Delete SKU price | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access | ||
| View promotions | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Create/Update/Delete promotion | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access | ||
Shipping preferences | ||||
| View carriers | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMSHIPPINGADMIN | filtered by shop | ||
| Create carrier | ROLE_SMADMIN | |||
| Create carrier for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| Update/Delete | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN | requires shop access | ||
| Assign/Unassign to shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| View carrier SLA | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMSHIPPINGADMIN | requires carrier shop access | ||
| Create/Update/Delete carrier SLA | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN | requires carrier shop access | ||
| Enable payment method for SLA | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN | requires carrier shop access | ||
| View locations/state | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN, ROLE_SMCONTENTADMIN | |||
| Create/Update/Delete location/state | ROLE_SMADMIN | |||
Inventory management | ||||
| View warehouses | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access to warehouse | ||
| Create/Delete warehouse | ROLE_SMADMIN | |||
| Create warehouse for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access | ||
| Update warehouse | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN | requires shop access to warehouse | ||
| Assign/Unassign warehouse to shop | ROLE_SMADMIN | Cloud users must use "Create warehouse for shop" | ||
| View inventory | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | filtered by shop access to warehouse | ||
| Create/Update/Delete inventory | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN | requires shop access to warehouse | ||
Customer management | ||||
| View/Update customer | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| View customer address book | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access | ||
| View customer wish list | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access | ||
| Assign/Unassign customer to a shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access | ||
| Reset customer password | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access | ||
| Manage customer orders/deliveries | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access | ||
Customer order management | ||||
Approve orders
|
| ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMCALLCENTERORDERAPPROVE | requires shop access, and for ROLE_SMCALLCENTERORDERAPPROVE additionally requires ROLE_SMCALLCENTERCUSTOMER | ||||
| Confirm offline orders | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMCALLCENTERORDERCONFIRM | requires shop access, and for ROLE_SMCALLCENTERORDERCONFIRM additionally requires ROLE_SMCALLCENTERCUSTOMER | ||||
| Progress orders and deliveries | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMCALLCENTERORDERPROCESS | requires shop access, and for ROLE_SMCALLCENTERORDERPROCESS additionally requires ROLE_SMCALLCENTERCUSTOMER | ||||
Reporting | ||||||
|---|---|---|---|---|---|---|
| Reports | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMREPORTADMIN | |||||
System | ||||||
| View/Create/Update/Delete preference | ROLE_SMADMIN | |||||
| Reindexing | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMMARKETINGADMIN, ROLE_SMCONTENTADMIN | |||||
| Cache operations | ROLE_SMADMIN, ROLE_SMSHOPADMIN | |||||
| Database operations (SQL) | ROLE_SMADMIN | |||||
| Cluster | ROLE_SMADMIN | |||||
| Payment Gateways configuration (default) | ROLE_SMADMIN | |||||
| Payment Gateways configuration for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |