Users and User Groups Overview

In uStore, permissions are granted to user groups rather than to individual users. Each user is assigned to one or more groups and receives the permissions of those groups. Groups can also be arranged in a hierarchy, in which a group inherits the permissions of its parent group.

User group permissions are cumulative, meaning if a user belongs to two or more groups, the Allow setting in one group will override any Deny setting in the other group(s). The Allow applies only to the stores that the allowing group can access.

Permissions are set on the Permissions tab of the User Group Setup page. To open it, in the left panel click Users & Groups, select Group List, and then click the name of the group.

Each permission can be set to Allow or Deny. When the Inherit checkbox is selected, the permission takes its setting from the parent group, and the Inherited From field shows which group it came from. Clear Inherit to set Allow or Deny yourself. A setting made on the group itself overrides one inherited from the parent group, and an exception for a particular store or product overrides the group's general setting.

You can also add exceptions, so that a permission applies only to specific stores or products rather than to all of them. For details, see Assigning Permissions to the User Group.

The main permissions are:

Storefront user groups

  • Checkout Orders: Allows shoppers to check out orders.

  • See All Products, See All Product Groups: Control which products and product groups the group can access in the store. Add exceptions to limit specific items.

  • Approve Customer Orders, Modify Customer Orders: Allow approving or modifying orders when approvals are enabled for a store. Modify Customer Orders cannot be granted on its own; it requires Approve Customer Orders.

Backoffice user groups

  • See Back Office Users, Edit Back Office Users, Create User: View, create and edit backoffice users.

  • See Storefront Users, Edit Storefront Users: View and edit storefront users.

  • See Store List, Create Store, Manage All Stores: View, create and manage stores.

  • See Orders, See All Order Queues, See All Order Actions: View orders, and control which order queues and order actions the group can use to process them.

  • See Reports: Run reports.

  • See Global Settings: Access the Global Settings pages.

  • Preview Stores on Behalf of Other User: Log in to the storefront as a different user.

  • Access Web Service API, Access Backoffice API: Allow integrations and applications to call the uStore APIs.

  • Link to Circle using SSO: Used in special circumstances.

What to watch out for

  • A permission whose name starts with "See" often allows changes as well, not only viewing. For example, See Global Settings allows editing every page in Global Settings.

  • Some areas are available only to superusers and do not appear in the permissions list at all: Product Profiles, Group List, Support and Log Viewer.

  • You do not give a group access to the backoffice by setting a permission. A group can log in to the backoffice if backoffice stores are assigned to it.

  • The stores a user can work with are set in the Manage Stores window, not in the permissions list. If a user cannot open a store, check there first.

More topics

Managing Users

User Groups Types