Configure Roles and Permissions

As Linda Rosenberg, Cloud Kick’s administrator, learned on her first day, in Business Manager a role is a group of permissions that you grant to a set of users. Users can have multiple roles.

She already assigned roles in Account Manager that allow users to access Business Manager instances. The roles that she creates in Business Manager are different. They control access to B2C Commerce functions and data. Business Manager comes with sample roles, such as the administrator role that’s assigned to Linda.

Roles contain Business Manager module permissions and functional permissions and are defined in the context of an organization. Module permissions grant access to Business Manager modules, while functional permissions grant permission to perform certain tasks. For example, Traude Beck, the Cloud Kicks merchandiser, needs to edit data in the catalog. To do that she needs write access to the Catalogs module in the Merchant Tools area and functional permission to manage catalogs. She must have both types of permissions to edit the data.

A role must also specify the permitted languages or locales. Permissions are additive. A user has all of the permissions of all the roles they are assigned to.

The Cloud Kicks site already has the following roles and assigned permissions.

Linda sees that the existing admin role gives the new admin Peter all the functionality he needs to do his job. But it looks like she needs to add a new merchandiser role for Traude. Traude’s job requires that she create and edit storefront data such as products and content. Traude needs the following permissions.

Here’s how Linda creates a new merchandiser role for Traude.

1. Open Business Manager.
2. Select Administration > Organization > Roles & Permissions. 
3. Linda’s Administrator role, which is marked with a yellow triangle, is security-sensitive. This role is what grants her the permission she needs to manage users and access roles.
4. Click New to create a new role. 
5. Enter merchandiser and click Apply.
6. Click the Business Manager Modules and Functional Permissions tabs to add permissions.

Linda adds permissions to this role.

1. Open Business Manager.
2. Select Administration > Organization > Roles & Permissions.
3. Click the Business Manager Modules tab.
4. Select the Cloud Kicks site and click Apply. 
5. Select the modules for:
   • Products and Catalogs
   • Content
   • Search
   • Online Marketing
   • Ordering
   • Analytics
6. Click Update.
7. Click the Functional Permissions tab.
8. Select the Cloud Kicks site and click Apply. 
9. Assign these functional permissions:
   • Manage_Site_Catalog
   • Manage_Site_PriceBooks
   • Manage_Site_Inventory
10. Click Update.

Linda now assigns permissions on the English locale to the merchandising role. Traude needs this permission so she can view or edit localized English attributes and create English storefront data.

1. From the merchandiser role, click the Locale Permissions tab. 
2. Click the checkbox to grant write access to the English locale.
3. Click Apply.

Next, Linda’s manager asks her to add WebDAV permissions to the existing developer role. Here’s what she does.

1. In the Roles & Permissions module, select the developer role.
2. Click the WebDAV Permissions tab. 
3. Grant write access to all the folders.
4. Update the role.

Now Linda can assign the merchandiser role to Traude so she can do her job. As a merchandiser, Traude needs to be able to edit the site catalog, pricing, and inventory. She should only see the data for her site.

1. On the Roles & Permissions page, select the merchandisers role. 
2. Click the Users tab, and click Assign.
3. Select the user ID and click Assign.

Linda follows the same steps to assign the admin role to Peter. Now both new users can start doing their work at Cloud Kicks.

In this module Cloud Kicks’ new administrator, Linda Rosenberg, created new user records in Account Manager and a new role in Business Manager. She assigned permissions to the new role so that Traude, one of her new users, can access the data she needs to work with in her job. Linda also added WebDAV permissions to an existing developer role and added password protection to a fledgling site.

Now it’s time to test your knowledge and earn a new badge!

• Trailhead: Salesforce B2C Commerce for Developers
• Salesforce Help: Permissions, Users, and Roles