Access

 

Each manager has shop assignments. The platform uses these assignments and shop relationships to other object in the system to infer access to data that any particular manager has. For example in order to access PRODUCT object this product has to be assigned to a CATEGORY and that category has to be reachable via SHOP_CATEGORY, thus by knowing what shops a manager has access to we can infer all accessible products.

Some objects (e.g. ATTRIBUTE, BRAND) are system shared objects and thus require a system admin role in order to manipulate the data.

Authorization

 

Functional AreaRole RequiredNotes

User Management

View users ROLE_SMADMIN, ROLE_SMSHOPADMIN filtered by shop access 
Create/Update/Delete user ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access to at least one shop assigned to user 
Grant/revoke roles ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access to at least one shop assigned to user. ROLE_SMADMIN can be granted/revoked only by another ROLE_SMADMIN 
Update/Reset password ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access to at least one shop assigned to user 
Role management ROLE_SMADMIN  

Attribute Management

View attributes ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN  
Create/Update/Delete attribute ROLE_SMADMIN  
View attribute groups ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN  
Create/Update/Delete attribute groups ROLE_SMADMIN  
View attribute types ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN  
Create/Update/Delete attribute types ROLE_SMADMIN  
View product types ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN  
Create/Update/Delete product types ROLE_SMADMIN  

Shop management

View shop ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
Create shop ROLE_SMADMIN Cloud users will have shop created via cloud registration 
Update shop ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
View shop currencies ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
Update shop currencies ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
View shop shipping/billing countries ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
Update shop shipping/billing countries ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
View shop urls ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
Update shop urls ROLE_SMADMIN  

Catalog management

View categories ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN filtered by shop access 
Create category ROLE_SMADMIN  
Create category for shop ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop access 
Update category ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop access 
Remove category ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
Assign/Unassign to shop ROLE_SMADMIN Cloud users use "Create category for shop" and "Remove category" 
View products/SKU ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN filtered by shop categories 
Create/Update/Delete product/SKU ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop category access 
View product associations ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop category access 
Create/Update/Delete product associations ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop category access 
Create/Update/Delete SKU price ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop category access 
View Tax configurations ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN 
Create/Update/Delete Tax configurations ROLE_SMSHOPADMIN 
View brands ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN  
Create/Update/Delete brands ROLE_SMADMIN  

Content management

View content ROLE_SMADMIN, ROLE_SMCONTENTADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER requires shop access 
Create content root ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
Create/Update/Delete content ROLE_SMADMIN, ROLE_SMCONTENTADMIN requires shop access 

Marketing management

View prices ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
Create/Update/Delete SKU price ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop access 
View promotions ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
Create/Update/Delete promotion ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN requires shop access 

Shipping preferences

View carriers ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMSHIPPINGADMIN filtered by shop 
Create carrier ROLE_SMADMIN  
Create carrier for shop ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
Update/Delete ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN requires shop access 
Assign/Unassign to shop ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
View carrier SLA ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMSHIPPINGADMIN requires carrier shop access 
Create/Update/Delete carrier SLA ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN requires carrier shop access 
Enable payment method for SLA ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN requires carrier shop access 
View locations/state ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN, ROLE_SMCONTENTADMIN  
Create/Update/Delete location/state ROLE_SMADMIN  

Inventory management

View warehouses ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access to warehouse 
Create/Delete warehouse ROLE_SMADMIN  
Create warehouse for shop ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access 
Update warehouse ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN requires shop access to warehouse 
Assign/Unassign warehouse to shop ROLE_SMADMIN Cloud users must use "Create warehouse for shop" 
View inventory ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN filtered by shop access to warehouse 
Create/Update/Delete inventory ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN requires shop access to warehouse 

Customer management

View/Update customer ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
View customer address book ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER requires shop access 
View customer wish list ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER requires shop access 
Assign/Unassign customer to a shop ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN requires shop access 
Reset customer password ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER requires shop access 
Manage customer orders/deliveries ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER requires shop access 

Reporting

Reports ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMREPORTADMIN  

System

View/Create/Update/Delete preference ROLE_SMADMIN  
Reindexing ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMMARKETINGADMIN, ROLE_SMCONTENTADMIN  
Cache operations ROLE_SMADMIN, ROLE_SMSHOPADMIN  
Database operations (SQL) ROLE_SMADMIN  
Cluster ROLE_SMADMIN  
Payment Gateways configuration (default) ROLE_SMADMIN  
Payment Gateways configuration for shop ROLE_SMADMIN, ROLE_SMSHOPADMIN requires shop access