---
schema_version: "1"
id: 57b240a124b0ab13b4db5695af8100e1ba47734f72c8f8e740bca9227d8f786e
title: Roles Managed in Account Manager
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_account_manager_roles.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_roles.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e57ff757149ac734b20a4e274500d7e2e38d4a96820f68493cb1f6f2345bf601
description: Use this table as a guide to the B2C Commerce Account Manager roles.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Roles Managed in Account Manager

Use this table as a guide to the B2C Commerce Account Manager roles.

[Which Salesforce Commerce Product Do I Have?](https://help.salesforce.com/s/articleView?id=commerce.comm_what_product.htm&language=en_US)

Only users with the Account Administrator role can assign the Account Administrator and Control Center Administrator roles.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:13.636363636363635%">
        <col style="width:13.636363636363635%">
        <col style="width:9.090909090909092%">
        <col style="width:18.181818181818183%">
        <col style="width:45.45454545454545%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d189661e54">Service Name</th>
          <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d189661e57">Role Name</th>
          <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d189661e60">Target Type </th>
          <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d189661e63">Scope of Role</th>
          <th scope="col" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" id="d189661e66">Allowed Actions</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Account Manager</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Account Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User/API Client</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Organization</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">
            <p>Permits this user to view other user accounts. Permits this user to
              add other user accounts. Permits this user to edit other user accounts. Permits this
              user to edit API clients for their organization.</p>
            <p style="margin-bottom:0;">Only user accounts within the same
              organization are visible. If a user with the Account Administrator role is assigned
              to multiple organizations, the user is the Account Administrator for all of the
              assigned organizations.</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Account Manager</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">API Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User/API Client</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Organization</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the account to view API client IDs. Permits the account to
            add API client IDs. Permits the account to edit API client IDs. Enables the Account
            Manager API Client tab for the user.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Account Manager</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">User Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User/API Client</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Organization</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">
            <p>Permits the user to manage the lifecycle of user accounts within their
              organization. This includes adding, inviting, and deleting users, and resetting
              passwords, unlocking accounts, and purging users. Permits the user to manage
              organization assignments, roles, and tenant filters for users, and to delete
              multi-factor authentication (MFA) verifiers.</p>
            <p style="margin-bottom:0;">Users with this role can view user change logs and assign the User Administrator
              role to others, but cannot assign the Account Administrator role.</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Account Manager</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Read Only Account Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User/API Client</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Organization</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user read only access to the organization's details, API
            clients and users. Users with this role can't update or create organizations, API
            clients, or users.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">B2C Commerce Developer Experience</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Sandbox API User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to manage On-Demand Sandboxes (ODS) with the ODS
            REST API. It also provides a Control Center role to access and manage ODS in Control
            Center.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">B2C Commerce managed Runtime</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Managed Runtime User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Allows access to Commerce Runtime Manager as part of a specific
            organization.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">B2C Commerce Managed Runtime</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Managed Runtime Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Allows admin access to Commerce Runtime Manager as part of a
            specific organization, allowing the admin to create projects and assign project
            permissions</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Control Center</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Control Center Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">For all Business Manager Instances</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to act as an administrator within their primary
            org. The user is granted administrative access to all instances of their primary
            organization in Control Center. Administrators can assign permissions to any instance
            of any realm in their organization to users in their own organization or another
            organization. This role allows Users to view audit logs, and to view users and manage
            roles in their primary org. See Control Center documentation for more details.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Control Center</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Control Center User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">For all Business Manager Instances</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits use of the Control Center application. Users with this role
            can assign and unassign the permissions they received to an instance within Control
            Center (through direct assignment or role assignment). If the user has the Grant
            Permissions permission, they can assign the permission they received to other users
            assigned to the instance. See Control Center documentation for more details</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">CQuotient</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">CQuotient Configurator User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits basic read and write access to individual sites.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">eCommerce Platform and Business Manager</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Business Manager Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits full administrative access to a Business Manager
            instance.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">eCommerce Platform and Business Manager</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Business Manager User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to log in to a Business Manager instance but
            doesn't automatically assign any BM roles beyond that. Administrators for the Business
            Manager instance can set up rules to assign some local roles upon a user's first
            login. See Business Manager documentation for more details.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Log Center</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Log Center User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to access logs for a specific tenant and realms.
            Access to log messages is managed through tenant filters and Business Manager
            instances. Defining Business Manager instance for this role is mandatory. The role has
            access to the following Log Center features: log messages visualization, management of
            it's own save searches and notifications.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Log Center</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Log Center External Admin</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to view security logs, access logs for a specific
            tenant and realm, and complete the actions allowed under the Log Center User Role.
            Access to log messages is managed through tenant filters and Business Manager
            instances. Defining a Business Manager instance for this role is mandatory. The role
            grants access to these Log Center features: Log message visualization, and management
            of the user’s saved searches and notifications.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Open Commerce API (OCAPI) Explorer</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">OCAPI Explorer Debug User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Tenant/Realm/Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to access OCAPI request debug information on a per
            tenant, realm, and instance basis.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Reports and Dashboards (R&amp;D)</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Reports and Dashboards Customer Manager</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to view the Reports and Dashboards for their realm
            and access the Reports and Dashboards settings page for their realm.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Reports and Dashboards (R&amp;D)</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Reports and Dashboards User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user read only access to the Reports and dashboards for
            their realm.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Reports and Dashboards (R&amp;D)</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Reports and Dashboards Performance User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits access to the Performance dashboard in R&amp;D</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">Shopper Login and API Access Service (SLAS) Shopper Admin
            API</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Salesforce Commerce API</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">API Client</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to access the Salesforce Commerce APIs.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">SLAS Shopper Admin API</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">SLAS Organization Administrator</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Assigns the Merchant role for management of SLAS tenant level
            configuration.</td>

        </tr>
        <tr class="">
          <td data-label="Service Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e54 ">B2C Commerce Developer Experience</td>

          <td data-label="Role Name" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e57 ">Sandbox API User</td>

          <td data-label="Target Type" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e60 ">User/API Client</td>

          <td data-label="Scope of Role" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e63 ">Specific Business Manager Instance</td>

          <td data-label="Allowed Actions" class="slds-cell-wrap" style="text-align:left;vertical-align:top;" headers="d189661e66 ">Permits the user to create new on-demand sandboxes (ODS) using the
            REST API in AWS sandbox environment. This role also grants users access to ODS
            functionality within Control Center.</td>

        </tr>
      </tbody>
    </table>