---
schema_version: "1"
id: 15a87c5bdec989646323d8a8331f0c9704f9ba8ac8749308596206f01da323d6
title: Introduction to Roles in B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_introduction_to_roles.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_introduction_to_roles.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d8ff5f6a6e2da56262dd3f0c24ace6e5871c9257ffa8b539685155d6f353825c
description: In Business Manager, you can perform authentication to determine if the user is who they claim to be. You can also perform authorization to determine if the user has permission to perform the specific action they’re attempting.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Introduction to Roles in B2C Commerce

In Business Manager, you can perform authentication to determine if the user is who they claim to be. You can also perform authorization to determine if the user has permission to perform the specific action they’re attempting.

The following entities can consume storefront services.

- Shoppers interacting with a site
- API clients (custom code) making calls to the Open Commerce API (OCAPI) Shop API

The following entities can consume Business Manager services.

- Users interacting with Business Manager
- API clients (custom code) making calls to the OCAPI Data API

In each case, consider using a distinct credential per user, such as a password, rather than a single shared credential. In addition to reducing the likelihood of credential theft, the credential process is easier to maintain. If a member leaves the team, you can delete their credentials instead of redistributing a new set of credentials across the team.