User Roles

To give someone restricted access to the Admin, the first step is to create a role that has the appropriate level of permissions. After the role is saved, you can add new users and assign the restricted role to grant them limited access to the Admin.

To set up a role:

  1. On the Admin sidebar, click System.

  2. Under Permissions, choose User Roles.

  3. In the upper-right corner, click Add New Role. Then, do the following:

Step 1: Define the Role

  1. Under Role Information, enter a descriptive Role Name.

  2. Under Current User Identity Verification, enter Your Password.

    Role Name

Step 2: Assign Resources

Important! When assigning resources, be sure to disable access to the Permissions tool if you are limiting access for a given role. Otherwise, users will be able to modify their own permissions.

  1. Set Role Scopes to one of the following:

    • All
    • Custom

    If set to Custom for a multisite installation, mark the checkbox of the website and store where the role is to be used.

    Custom Role Scope

  2. Under Roles Resources, set Resource Access to Custom.

  3. In the tree, mark the checkbox of each Admin Resource that the role can access.

    To create an Admin role with access to tax settings, choose both the Sales/Tax and System/Tax resources. If setting up a website for a region that differs from your default shipping point of origin, you must allow access to the System/Shipping resources for the role. The shipping settings determine the store tax rate that is used for catalog prices.

    Role Resources Assigned

    The list of available permissions may include additional options for Magento developed, Core Bundled, and installed extensions. By selecting the top-most permission for each feature, you assign all permissions available for the user.

  4. When complete, click Save Role.

    The role now appears in the grid, and can be assigned to new user accounts.

User role assignments

To edit user role assignments:

  1. From the Roles grid, open the record in edit mode.

  2. Under Current User Identity Verification, enter Your Password.

    Editing a Role

  3. In the panel on the left, choose Role Users.

    The Role Users option appears only after a new role is saved.

  4. To search for a specific user record, do the following:

    • Enter the value in the search filter at the top of a column. Then, press Enter.

    • When you are ready to return to the full list, click Reset Filter.

  5. Mark the checkbox of any user(s) to be assigned to the role.

  6. Click Save Role.

    Role Users