After July 2021, the 2.3.x release line will no longer receive quality updates, or user guide updates. PHP 7.3 reaches end of support in December 2021 and Adobe Commerce 2.3.x reaches end of support in September 2022. We strongly recommend planning your upgrade now to Adobe Commerce 2.4.x to help maintain PCI compliance.

User Roles

The information on this page is intended for Adobe Commerce 2.3 customers who are on an extended support contract. The Adobe Commerce Merchant Documentation for current releases is published on the Adobe Experience League.

To give someone restricted access to the Admin, the first step is to create a role that has the appropriate level of permissions. After the role is saved, you can add new users and assign the restricted role to grant them limited access to the Admin.

Magento Admin - user roles

Set up a role

  1. On the Admin sidebar, go to System > Permissions > User Roles.

  2. In the upper-right corner, click Add New Role. Then, complete the steps to define the role:

Step 1: Add the role name

  1. Under Role Information, enter a descriptive Role Name.

  2. Under Current User Identity Verification, enter Your Password.

    System permissions - role information Role Name

Step 2: Assign resources

Important! When assigning resources, be sure to disable access to the Permissions tool if you are limiting access for a given role. Otherwise, users will be able to modify their own permissions.

  1. Set Role Scopes to one of the following:

    • All
    • Custom

    If set to Custom for a multisite installation, select the checkbox of the website and store where the role is to be used.

    User role resources - custom scope Custom Role Scope

  2. Under Roles Resources, set Resource Access to Custom.

  3. In the tree, select the checkbox of each Admin Resource that the role can access.

    To create an Admin role with access to tax settings, choose both the Sales/Tax and System/Tax resources. If setting up a website for a region that differs from your default shipping point of origin, you must allow access to the System/Shipping resources for the role. The shipping settings determine the store tax rate that is used for catalog prices.

    Assigned user role resources Role Resources Assigned

    The list of available permissions may include additional options for Magento developed, Core Bundled, and installed extensions. By selecting the top-most permission for each feature, you assign all permissions available for the user.

  4. When complete, click Save Role.

    The role now appears in the grid, and can be assigned to new user accounts.

Edit user role assignments

  1. From the Roles grid, open the record in edit mode.

  2. Under Current User Identity Verification, enter Your Password.

    Enter your password to edit the role Editing a Role

  3. In the left panel, choose Role Users.

    The Role Users option appears only after a new role is saved.

  4. To search for a specific user record, do the following:

    • Enter the value in the search filter at the top of a column. Then, press Enter.

    • When you are ready to return to the full list, click Reset Filter.

  5. Select the checkbox of any user(s) to be assigned to the role.

  6. Click Save Role.

    User accounts assigned to the role Role Users