--- schema_version: "1" id: 7c32e24a03918345d521670326be4d927830c0584d3144cf3e1a3eab64fc1890 title: Roles and Permissions in B2C Commerce collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_roles_and_permissions.md canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_roles_and_permissions.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 63987e829f97cc3ade2e8364e184d9081deb874dcc0f4a59af3c0f2396602f8b description: We recommend limiting access to modules to only users who use the module. To restrict and grant access to modules, use roles and permissions. When properly configured, a user who logs into B2C Commerce sees only the modules required for their job. This eliminates confusion and increases the security of the organization. products: - Commerce - B2C Commerce release: "264" --- # Roles and Permissions in B2C Commerce We recommend limiting access to modules to only users who use the module. To restrict and grant access to modules, use roles and permissions. When properly configured, a user who logs into B2C Commerce sees only the modules required for their job. This eliminates confusion and increases the security of the organization. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png) Note Roles and permissions described here are for Business Manager users only and not for storefront customers. ## Roles Roles represent groupings of permissions. They're defined in the context of an organization. Assign multiple roles to a user and associate these roles with permissions. A user owns the permissions assigned to each of their roles. B2C Commerce defines sample roles for the SiteGenesis application site, such as the administrator role. The administrator role has permissions on all Business Manager modules below the Administration menu. Create your own roles depending on your specific needs for the site's organization. Check your assigned roles, including instance filters, on the Account Information page in Account Manager. ## Permissions Configure Business Manager [module permissions](https://help.salesforce.com/s/articleView?id=cc.b2c_administrator_role.htm&release=264.0.0&type=5 "Module permissions grant access to specific B2C Commerce Business Manager modules. If a logged-in user has permission to access a Business Manager module, the application appears in the left navigation pane.") and [functional permissions](https://help.salesforce.com/s/articleView?id=cc.b2c_administrator_role.htm&release=264.0.0&type=5 "Functional permissions aren't associated with a B2C Commerce tool module. They let a user perform specific functions in B2C Commerce."). Module permissions include the ability to transfer, replicate, and edit B2C Commerce data. Also let users log in on behalf of a shopper or as a shopper, which is useful for support. Specify read or write access for most data, for one or more sites or across all sites in an organization. Functional permissions let a user perform specific functions in B2C Commerce. To edit data, combine functional permissions with Business Manager module permissions. You can also grant WebDAV permissions. To view a list of all users assigned to a specific permission, [audit a permission](https://help.salesforce.com/s/articleView?id=cc.b2c_administrator_role.htm&release=264.0.0&type=5 "Check which users have read or write access to a module in B2C Commerce Business Manager."). ## Business Manager Example This example assumes you have multiple sites and need to assign different levels of permissions for different users. | User Name | Title | Access Needs | | --- | --- | --- | | Marie | VP of Marketing | Views pricing and inventory for all sites. Views content assets for all sites. | | Traude | Site Merchandiser | View and edit storefront catalog, pricing, and inventory. A site merchandiser is important if there are multiple businesses running on the same realm that don't want to share data. The site merchandiser can only see data for their site, not data for other sites. | | Lucas | Site Administrator | Can’t view catalog, pricing, or inventory data. Can transfer data via WebDAV. Can replicate data. Can import or export data. Can run jobs. | | Henry | eCommerce Developer | Needs full access to catalog, pricing, and inventory data across all sites. Permission to transfer data via WebDAV or replicate data. These permissions only function for his sandbox. | As a first step, create roles.
Role Business Manager Permissions Functional Permissions
corporate

For each site, add the following site permissions:

  • Products and Catalogs
  • Content
 No permissions assigned.
merchandiser

For a specific site, add the following site permissions:

  • Products and Catalogs
  • Content
  • Search
  • Online Marketing
  • Ordering
  • Analytics

Assign these:

  • Manage_Site_Catalog
  • Manage_Site_PriceBooks
  • Manage_Site_Inventory
site_admin

Add the following organization permissions:

  • Replication
  • Site Development module, Import & Export and Site Import & Export
  • Operations

For a specific site, add the following site permissions:

  • All Batch Processes
  • All Import & Export modules

Assign these:

  • Replication_Run_For_Org
  • WebDAV_Realm_Access
  • WebDAV_Manage_Customization
  • WebDAV_Transfer_Files
developer
  • All Site Development modules
  • Operations - Custom Log Settings, Pipeline Profiler
 No permissions assigned.
After you have created the roles, assign users to them.
Role Permissions
Marie

corporate
Traude

merchandiser

Note
Note If you wanted Traude to be able to view prices and inventory for all sites, but only be able to edit the data for her site, you can also add her to the corporate role.
Edward support_rep
Lucas

site_admin
Henry developer
#### See Also - [Create a Role in Business Manager (Video)](https://salesforce.vidyard.com/watch/ZUSt3ukp6bPUdbaN7JuEoM)