User roles
To give someone restricted access to the Admin, the first step is to create a role that has the appropriate level of permissions. After the role is saved, you can add new users and assign the restricted role to grant them limited access to the Admin.
{width="600" modal="regular"}
Define a role
-
On the Admin sidebar, go to System > Permissions > User Roles.
-
In the upper-right corner, click Add New Role.
-
Complete the steps to define the role:
Step 1: Add the role name
-
Under Role Information, enter a descriptive Role Name.
-
Under Current User Identity Verification, enter your password.
{width="600" modal="regular"}
Step 2: Assign resources
-
Set Role Scopes to one of the following:
All
Custom
If set to
Custom
for a multisite installation, select the checkbox of the website and store where the role is to be used.{width="600" modal="regular"}
note note NOTE Users with a Custom
role scope are not able to create websites and categories, assign products to categories, or edit products at All Store Views scope when they are assigned to restricted stores. These users also cannot perform other global actions that affect scopes where they do not have access. -
Under Roles Resources, set Resource Access to
Custom
. -
In the Resource tree structure, select the checkbox of each Admin capability that the role can access.
To create an Admin role with access to tax settings, choose both the Sales/Tax and System/Tax resources. If setting up a website for a region that differs from your default shipping point of origin, you must allow access to the System/Shipping resources for the role. The shipping settings determine the store tax rate that is used for catalog prices.
{width="600" modal="regular"}
The list of available permissions may include additional options for bundled and installed extensions. By selecting the top-most permission for each feature, you assign all permissions available for the user.
note note NOTE An Admin user must have Sales / Archive permissions for their role scope to see the Invoices, Credit Memos, and Shipments order tabs. -
When complete, click Save Role.
The role now appears in the grid and can be assigned to user accounts.
Assign a role to users
-
From the Roles grid, open the record in edit mode.
-
Under Current User Identity Verification, enter your user account password.
-
In the left panel, choose Role Users.
The Role Users option appears only after a new role is saved.
{width="600" modal="regular"}
-
To search for a specific user record, do the following:
-
Enter the value in the search filter at the top of a column and press Enter.
-
When you are ready to return to the full list, click Reset Filter.
-
-
Select the checkbox of any users to be assigned to the role.
-
Click Save Role.
Edit a role
-
On the Admin sidebar, go to System > Permissions > User Roles.
-
Locate the role using filters above the grid and click the role name.
-
Make needed changes.
Review the steps for creating a user role for information about the role settings.
-
When prompted, enter your password to confirm your identity.
-
Click the Save Role.
Delete a role
-
On the Admin sidebar, go to System > Permissions > User Roles.
-
Locate the role using filters above the grid and open in edit mode.
-
In the upper-right corner, click Delete Role.
-
To confirm the action, click OK.
User roles demo
Watch this video to learn about managing user roles:
Role resources
Access to the following resources can be assigned to a custom role. See the linked page to learn more about the capabilities that are associated with each resource.
- Adobe Commerce only
- Available with Adobe Commerce B2B only
Archive
![Adobe Commerce]Allow Login as Customer Button
View Login as Customer Log
Communications
Sales Channel
System Insights
Connect Manager
Package Extensions