---
schema_version: "1"
id: 27eb02c1988e04c06a88d4d0e59ba5afc200e93bb13228d4000aeff7cc8f757f
title: Set the Order Allowlist
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_set_order_allowlist.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_set_order_allowlist.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ca5c84c5a7d9b4afa67cf4792d48980ba67afa78a3a10b022b6b9201ef5684d3
description: To improve the security and manageability of order access within your B2C Commerce storefront, Salesforce recommends enabling the AllowList feature within the Limit Storefront Order Access setting. This feature is useful if you haven’t yet implemented any restrictions on Storefront Order Access. After activating this feature, specify which controllers are permitted to access order information and execute order-related functions.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Set the Order Allowlist

To improve the security and manageability of order access within your B2C Commerce storefront, Salesforce recommends enabling the AllowList feature within the Limit Storefront Order Access setting. This feature is useful if you haven’t yet implemented any restrictions on Storefront Order Access. After activating this feature, specify which controllers are permitted to access order information and execute order-related functions.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png)

Note Starting with the B2C Commerce 24.8 release, B2C Commerce blocks the allowlist fully implemented controllers not listed on the allow list from storefront order access.

1. In Business Manager, click App Launcher ![App Launcher](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/appLauncher.png), and then select **Merchant Tools** | **site** | **Ordering** | **Orders** | **Order Preferences** | **Order Action Settings**.
2. From the Limit Storefront Order Access dropdown, select **Allow List**.
3. In the text field, enter the storefront controllers that you want to have access. List each controller separated by a comma. Only the controllers specified in this allow list can access customer orders.
4. Click **Apply**.