Manage user roles and permissions
A user's grants decide what they can do. Each grant gives a role, or a list of specific permissions, for all merchants or the ones you choose, and for any region or the countries or locations you choose. Multi-merchant organizations can give each user only the merchants they work on.
Dashboard and Storeapp roles:
- Admin, can manage shipments, carrier accounts, service levels, routing rules, users, webhooks, locations, communications, and custom attributes.
- Account Manager, can change account-level rules, SLA, and notifications for all merchants.
- Manager, can change shipping rules, SLA, and notifications at the brand level.
- Operator, can manage shipments and returns but can only view carrier accounts and routing rules.
- IT Manager, can only access connectors, webhooks, and the client app under Integrations.
- Viewer, can view information but cannot create or update anything.
Admin and Account Manager always apply to every merchant and region.
The tables below show the full permissions for each role.
Account level role
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Account Level Role | Yes | Yes | No | No | No | No
Settings
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Settings - Account | Full Access | No Access | No Access | No Access | No Access | No Access Settings - email domain | Full Access | No Access | No Access | No Access | No Access | No Access Settings - Downloads | Read Access | Read Access | Read Access | Read Access | Read Access | Read Access Settings - custom domain | Full Access | No Access | No Access | No Access | No Access | No Access Settings - Locations | Full Access | Full Access | Read Access | Read Access | Read Access | Read Access Settings - Notifications | Full Access | Full Access | Full Access | No Access | No Access | No Access Settings - Reason Codes | Full Access | Read Access | Read Access | Read Access | Read Access | Read Access Settings - Returns | Full Access | Full Access | Full Access | No Access | No Access | No Access Settings - Shipment Attributes | Full Access | Read Access | Read Access | Read Access | Read Access | Read Access Settings - Users | Full Access | No Access | No Access | No Access | No Access | No Access
General
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Alerts | Read Access | Read Access | Read Access | Read Access | Read Access | Read Access Home | Read Access | Read Access | Read Access | Read Access | Read Access | Read Access Control Tower | Read Access | Read Access | Read Access | Read Access | Read Access | Read Access Reports | Read Access | Read Access | Read Access | Read Access | Read Access | Read Access
Shipping
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Shipments - Forward & Reverse | Full Access | Full Access | Full Access | Full Access | Read Access | Read Access Shipment System Logs | Read Access | Read Access | Read Access | Read Access | Read Access | No Access Shipments - Manifests | Full Access | Full Access | Full Access | Full Access | Read Access | Read Access Shipments - service levels | Full Access | Full Access | Full Access | Read Access | Read Access | Read Access
Carriers
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Carriers - Accounts | Full Access | Full Access | No Access | No Access | No Access | No Access Carriers - Capacity | Full Access | Full Access | No Access | No Access | No Access | No Access Carriers - Network | Full Access | Full Access | No Access | No Access | No Access | No Access Carriers - Costing | Full Access | Full Access | No Access | No Access | No Access | No Access
Shipping & customer management
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Automations | Full Access | Full Access | Full Access | Read Access | Read Access | Read Access Notifications | Full Access | Full Access | Full Access | No Access | No Access | No Access CX Apps | Full Access | Full Access | Full Access | No Access | No Access | No Access Returns | Full Access | Full Access | Full Access | Full Access | Read Access | Read Access
Integrations
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Integration - API Access | Full Access | No Access | No Access | No Access | No Access | No Access Integration - API Client App | Full Access (with READ ACCESS to INTERNAL scopes in CLIENT APP) | No Access | No Access | No Access | Full Access (with READ ACCESS to INTERNAL scopes in CLIENT APP) | No Access Integration - Connectors | Full Access | No Access | No Access | No Access | Full Access | No Access Integrations - Webhooks | Full Access | Read Access | Read Access | No Access | Full Access | No Access
Retrigger webhooks
| Admin | Account Manager | Manager | Operator | IT Manager | Viewer ---|---|---|---|---|---|--- Retrigger Webhooks | Read Access | Read Access | Read Access | No Access | Read Access | No Access
Specific permissions
When no role fits, give a list of permissions instead, such as shipment:list and shipment:read. Pick them under Grants > Specific permissions on the user's page. Click What … can do on the page to see everything the user's grants add up to.
Fulfillment app roles
Fulfillment app roles give work at a store. Each applies to every merchant and country, at the fulfillment locations it names, and needs the Fulfillment app.
| Role | What it does |
|---|---|
| Store Admin | Manages the store settings and its Fulfillment app users |
| Picker | Picks orders |
| Packer | Packs orders and creates their shipments |
| Collector | Hands over click-and-collect orders |
| Shipper | Scans, ships and imports shipments |
| Order Handler | Rejects orders the store cannot fulfill |
| Returns Handler | Receives and completes returns |
| Customer Service | Updates customer details |
Store admins give the other roles to their store's users in the Fulfillment app, under Settings > Users.
Change a user's access
To change what a user can do, you need the user management permission, which Admins hold. You can only give access you hold yourself. Go to Settings > Users and select a user. See Manage users for step-by-step instructions.