Descriptions of organization role permissions

Plan requirement

Custom organization roles are available only on the Shopify Plus plan.

Permissions grant or restrict access to specific areas of your Shopify admin, and granular tasks within those areas. At the organization level, there are multiple categories of permissions. These permissions let users make changes to all the stores in your organization, including in stores where those users don't have store-level permissions. You can assign permissions to user roles to determine the level of access that a user role has to your organization.

Note

If your store or organization hasn't been migrated to the role-based access control model, then you need to assign organization permissions directly to users. Learn how to assign permissions with legacy Users and permissions settings.

Learn more about the different role categories for your organization, and store-level permissions.

Description of organization permissions

You can assign any of the following organization-level permissions to an Organization role from the Settings > Users section of your Shopify admin.

Description of organization-level permissions.

Permission	Description
Stores	This permission lets users manage the stores in your organization. A user with this permission can create new stores and approve any additional plan fees that might be needed for the store. For example, if you create a store that isn’t covered by your contract, then a user with the Stores permission can approve the fee for the new store. This permission does not allow users to approve the following fees: contract fees app fees
Billing	This permission lets users view bills and billing preferences, including payment methods. The View bills and preferences, including payment methods permission lets users review view past and upcoming bills, export bills, and view the information on the Billing profile page. The Pay bills and edit preferences, including payment methods permission lets users review view past and upcoming bills, export bills, authorize and retry failed bill payments, and change the information on the Billing profile page.
Analytics overview	Lets users view sales and order data. A user role with this permission can perform the following tasks: View sales and order data for all stores in the organization. View sales and order data for specific stores. Access detailed reports from within a store's Shopify admin. User roles with this permission can view aggregate data for all stores across an organization in the Shopify admin. To view detailed reports in a store's Shopify admin, the user role must have the Reports permission for that store.
Feature test drives	This permission lets users manage Feature test drives

Depcrecated organization permissions for role-based access control

Note

Users organization permissions are deprecated for the role-based access control model. You can assign eligible user roles to grant access to user management.

If your organization hasn't been migrated to the role-based access control model, then you can assign the following legacy organization-level permissions:

Description of deprecated organization-level permissions.

Permission

Description

Users

Lets users manage other users in your organization. This permission is for management of users at the organization level. For more information on store-level permissions, refer to User management permissions. A user with this permission can perform the following tasks: Add and remove users. Create and manage roles, and assign roles to users. Suspend and reactivate users. Give and remove organization-level permissions, including Users. Give and remove access to stores and set userstore permissions. Require users to use two-step authentication. Verify a domain for your organization. Reset two-step authentication for a user. The Users permission doesn’t let users change a store’s owner. Only a store owner can transfer ownership, and ownership can only be transferred from within the store. The organization owner is given the Users permission by default. You can't remove this permission from the organization owner.