User Permissions
Permissions let you choose what parts of a Merchant Center Project a Team's members can view and edit.
This section covers permissions for Merchant Center users. For API Client permissions, see Authorization and Scopes.
Learn more about setting up Permissions in our self-paced Organizations, Teams, and Projects module.
Merchant Center grants permissions based on a user's Team. Teams belong to only one Organization. An Organization can have as many Teams as needed, and a user can belong to more than one team in more than one Organization. You can assign permissions to a Team for multiple Projects in an Organization. If a user belongs to more than one Team, permissions are additive, and they receive all the permissions granted to them by all Teams they belong to.
You can assign the following permissions:
- View permissions: members of the Team can view, but not edit or delete.
- View and edit permissions: members of the Team can view, edit, and delete.
- Action Rights: some permissions have additional action rights, which control specific editing actions in a permission group. Action rights are a subset of view and edit permissions, scoping view and edit permissions to specific aspects of a particular area in the Merchant Center.
- Menu item permissions: hides navigation items from the main menu.
A Team can have view or edit permissions to a section of the Merchant Center, which is hidden from their menus.
Permissions are assigned to a specific Project in an Organization, and not to all Projects.
View and edit permissions are workflow-based. If users have permissions to access a workflow, the permissions are configured to ensure that all related data relationships needed for the workflow are fulfilled. For example, Orders permission grants access to several APIs such as Customers, Payments, States, Discount Codes, etc.
Conditional permissions
A conditional permission assigns view or view and edit permissions to a subset of data in your Project that meet the requirements specified. The conditions currently supported are assigning permissions by Store.
Administrators Team
Every Organization has an Administrators Team that can do the following:
- Access to the Account section of the Merchant Center to manage Projects, Organizations, etc.
- Create, modify, or delete a Project
- Create, modify, and delete Teams in the Organization
- Add new members to any Team in the Organization, including the Administrator Team
- Set the permissions for any Team and Project in an Organization
You cannot modify the Administrator Team's permissions. We strongly recommend adding at least one other user to the Administrator Team immediately after creating a new Organization.
Assign permissions and action rights to a Team
To assign permissions and action rights to a Team, do the following:
- Click the profile icon and select Manage Organizations & Teams.
- Select the Organization and Team.
- In the Permissions tab, select a Project (to set permissions for) from the Select Project drop-down.
- Toggle the permissions from the expandable sections. For more information on what each permission grants access to, see Reference: permissions and action rights.
- Optionally, select the action rights for a permission. For more information on what each action right allows a Team to do, see Reference: permissions and action rights.
Permission settings are saved as you edit them.
Assign conditional permissions to a Team
Conditional permissions are only supported on the following entities:
- Cart Discounts
- Customers
- Orders
- Quotes
To assign conditional permissions to a Team, do the following:
- Click the profile icon and select Manage Organizations & Teams.
- Select the Organization and Team.
- In the Permissions tab, select a Project (to set permissions for) from the Select Project drop-down.
- Select a section (Orders or Customers) and click Add condition.
- In the Condition panel, select the data fence type (only Stores) and values, and the permissions you want to grant within the data fence. For more information on how conditional permissions affect Merchant Center pages, see Reference: permissions and action rights.
- Click Save.
- Optionally, click Add another condition to add more conditional permissions ().
General permissions overwrite conditional permissions. Hence, when setting up a conditional permission, ensure to toggle off its equivalent general permission.
Reference: permissions and action rights
When granting view permissions, the page and information is shown in read-only mode, and no editing is allowed. When granting view and edit permissions, the page is shown, and editing of existing information or adding of new information is allowed.
By default, all Merchant Center pages have access to information stored in the Project settings.
Products
View all: Products: activate read-only mode for the following pages:
- Product list
- Direct Product access
- Product details
View and edit all: Products: grant permissions for viewing, editing, and adding Products:
- Product list
- Direct Product access
- Product details
Some functionalities in these pages are dependent on the action rights enabled.
Product action rights
After granting the view and edit permissions, you can grant the following action rights:
Add prices:
- Add new Prices to existing Products.
- Enables the Add price button in Product Variant pages.
- Enables the Add tier price button when creating a new Price.
- Implicitly grants view access to Customer Groups, as they can be used when creating new Prices.
Edit prices:
- Edit existing Prices for a Product.
- Implicitly grants view access Customer Groups, as they can be used when modifying Prices.
Delete prices:
- Delete existing Prices for a Product.
- Enables the delete icon in the Manage the price page.
Add products:
- Enables the Add Products button in the Product list page.
- Grants access to all Add Product pages.
- Implicitly grants view access to certain fields in Product Types, Categories, Product Discounts and Customer Group, as they are used when creating new Products.
Delete products:
- Enables the Delete option in the Actions drop-down in the Product list page.
- Enables the delete icon in the respective Product details page.
Publish products:
- Enables the Status drop-down in the Product details page.
- Enables the Publish option in the Actions drop-down in the Product list page.
Unpublish products:
- Enables the Status drop-down in the Product details page.
- Enables the Unpublish option in the Actions drop-down in the Product details page.
Edit attributes:
- Edit all: grants permissions for editing all Attributes.
- Edit only attributes assigned to the following Attribute group(s): grants permissions for editing Attributes assigned to the selected Attribute Group.
Product Selections
View all: Product Selections: activate read-only mode for the following pages:
- Product Selection list
- Enables Products tab in the Product Selection details page. View Products attached to a Product Selection.
- Enables Stores tab in the Product Selection details page.
View and edit all: Product Selections: grant permissions for viewing, adding, editing, and removing Product Selections:
- Product Selection list
- Add Product Selection
- Enables Products tab in the Product Selection details page. View Products attached to a Product Selection.
- Enables Stores tab in the Product Selection details page.
Categories
View all: Categories: activate read-only mode for the following pages:
- Categories list
- Category details
- Category search
View and edit all: Categories: grant permissions for viewing, editing, and adding Categories:
- Categories list
- Category details
- Category search
- Add category
Customers
View all: Customers: activate read-only mode for the following pages:
- Customers list
- If granted within a conditional permission, only Customers matching the specified data fence (for example, Customers of "Store A") and global Customers (not bound to any Store) are listed.
- Customer details
- If granted within a conditional permission, only Customers matching the specified data fence (for example, Customers of "Store A") and global Customers (not bound to any Store) can be accessed.
View and edit all: Customers: grant permissions for viewing, editing, and adding Customers:
- Customers list
- If granted within a conditional permission, only Customers matching the specified data fence (for example, Customers of "Store A") and global Customers (not bound to any Store) are listed.
- Customer details
- If granted within a conditional permission, only Customers matching the specified data fence (for example, Customers of "Store A") and global Customers (not bound to any Store) can be accessed. However, global Customers can only be accessed in read-only mode.
- Add customer
- If granted within a conditional permission, the Account restricted to these stores field is mandatory and one or more of the Stores matching the specified data fence must be selected.
Customer Groups
View all: Customer groups: activate read-only mode for the following pages:
- Customer group list
- Customer group details
View and edit all: Customer groups: grant permissions for viewing, editing, and adding Customer Groups:
- Customer group list
- Customer group details
- Add customer group
Orders
View all: Orders: activate read-only mode for the following pages:
- Dashboard
- Orders list
- If granted within a conditional permission, only Orders matching the specified data fence (for example, orders from "Store A") are listed.
- Order details
- If granted within a conditional permission, only Orders matching the specified data fence (for example, orders from "Store A") can be accessed.
View and edit all: Orders: grant permissions for viewing, editing, and adding Orders.
- Dashboard
- Orders list
- If granted within a conditional permission, only Orders matching the specified data fence (for example, orders from "Store A") are listed.
- Order details
- If granted within a conditional permission, only Orders matching the specified data fence (for example, orders from "Store A") can be accessed.
- Add order
- If granted within a conditional permission, a Store matching the specified data fence must be selected at the beginning of the flow.
Granting view and edit permissions to Orders implicitly grants view access to certain fields in Customers, Products (and all dependencies of Products, like Product Discounts), Discount Codes, and Cart Discounts when using the Add order page.
Some functionalities in these pages are dependent on the action rights enabled.
Order action rights
After granting the view and edit permissions, you can grant the following action rights:
Add order:
- Enables the Add Order button in the Order list page.
- Enables the Add Order menu item under Orders in the Merchant Center main menu.
- Enables the Copy this Order button in the Order details page.
- If granted with a conditional permission, the conditional permission will be overruled by general permissions (Order action right).
Add discount code:
- Enables the Apply button in the Applied Cart Discount section of the Shopping cart page.
- If granted with a conditional permission, the conditional permission will be overruled by general permissions (Order action right).
Create return:
- Enables the Create Return button in the Returns tab of the Order details page.
- If granted with a conditional permission, the conditional permission will be overruled by general permissions (Order action right).
Standalone Prices
View all: Standalone Prices: activate read-only mode for the following pages:
- Standalone price list
- Standalone price details
View and edit all: Standalone Prices : grant permissions for viewing, editing, and adding Standalone Prices:
- Add prices
- Edit prices
- Delete prices
Product Discounts
View all: Product discounts: activate read-only mode for the following pages:
- Product discounts list
- Product discount details
View and edit all: Product discounts: grant permissions for viewing, editing, and adding Product Discounts:
- Product discounts list
- Product discount details
- Add discount (Product Discount button only)
Granting view and edit permissions to Product Discounts implicitly grants view access to certain fields in Products and Categories when using the Add Product Discount page.
Cart Discounts
The conditional permissions set are not exclusive in the following instances:
- Cart Discounts requiring a Discount Code can be linked to a Discount Code created by any user.
- When any Custom Field references Cart Discounts, all Cart Discounts will be visible.
View all: Cart discounts: activate read-only mode for the following pages:
- Cart discounts list
- If granted within a conditional permission, only Cart Discounts matching the specified data fence (for example, Cart Discounts from "Store A") are listed.
- Cart discount details
- If granted within a conditional permission, only Cart Discounts matching the specified data fence (for example, Cart Discounts from "Store A") can be accessed.
View and edit all: Cart discounts: grant permissions for viewing, editing, and adding Cart Discounts:
- Cart discounts list
- If granted within a conditional permission, only Cart Discounts matching the specified data fence (for example, Cart Discounts from "Store A") can be accessed.
- Cart discount details
- If granted within a conditional permission, only Cart Discounts matching the specified data fence (for example, Cart Discounts from "Store A") can be accessed.
- Add discount (Cart Discount button only)
- If granted within a conditional permission, only Cart Discounts matching the specified data fence (for example, Cart Discounts from "Store A") can be accessed.
Granting view and edit permissions to Cart Discounts implicitly grants view access to certain fields in Customers, Customer Groups, Products, and Categories when using the Add Cart Discount page.
Discount Codes
Discount Codes must be used with a Cart Discount. When granting access to Discount Codes, ensure that the user group has access to Cart Discounts as well.
View all: Discounts codes: activate read-only mode for the following pages:
- Discount code list
- Discount code details
View and edit all: Discounts codes: grant permissions for viewing, editing, and adding Discount Codes:
- Discount code list
- Discount code details
- Add discount (Discount Code button only)
Granting view and edit permissions to Discount Codes implicitly grants view access to certain fields in Cart Discounts when using the Add Discount Code page.
Quotes
View all: Quotes: activate read-only mode for the following pages:
- Quote list
- If granted within a conditional permission, only Quotes matching the specified data fence (for example, quotes from "Store A") are listed.
View and edit all: Quotes: grant permissions for viewing, editing, and adding Quotes.
- Quote list
- If granted within a conditional permission, only Quotes matching the specified data fence (for example, quotes from "Store A") are listed.
Audit Log
View all: Audit log: activate read-only mode for the following page:
- Change history
Operations
View all: Operations: activate read-only mode for the following pages:
- Import logs
- Export logs
View and edit all: Operations: grant permissions for viewing the following screen:
- Upload files
Project settings
To manage other aspects of a project such as Organizations and Teams, you must be a member of the Administrators Team.
View all: Project settings: activate read-only mode for the following page:
- Project settings
View and edit all: Project settings: grant permissions for viewing, editing, and adding Project settings:
- Project settings
For more information on what you can configure using Project settings, see Project Settings.
Product Types
View all: Product types: activate read-only mode for the following page:
- Product types
View and edit all: Product types: grant permissions for viewing, editing, and adding Product Types:
- Product types
Attribute Groups
View all: Attribute groups: activate read-only mode for the following page:
- Attribute groups
View and edit all: Attribute groups: grant permissions for viewing, editing, and adding Attribute Groups:
- Attribute groups
Developer settings
Developer settings controls who can create API Clients. We recommend restricting access to only those who need it.
View all: Developer settings: activate read-only mode for the following page:
- Developer settings
View and edit all: Developer settings: grant permissions for viewing, editing, and adding developer settings:
- Developer settings