Descriptions of user roles for organizations

Note

If your store or organization hasn't been migrated to the role-based access control model, and your organization or store is on the Shopify Plus plan, then you can create legacy user roles instead.

There are two types of predefined roles available by default in your Shopify admin. You can assign users either of the following types of predefined user roles:

• System roles are predefined roles and can't be edited.
• Custom roles are predefined roles that you can edit to suit your business needs.

You can also create new roles with the permissions that you need.

Role categories

There are two different categories for user roles for organizations. Each category represents a unique business context and permissions specific to that context. User roles can't contain a mixture of organization-level permissions and store-level permissions. However, you can assign both Store roles and Organization roles to the same user.

Description of role categories for user roles in organizations.

Role category	Description	Permissions
Organization role	Roles and permissions in this category grant access to organization-level features across all stores in the organization. System roles in this category have the highest permissions in the organization.	organization-level permissions
Store role	Roles and their permissions in this category grant access to features and resources to an individual store. System roles in this category are limited to the store context.	store-level permissions

System roles

Note

Organization owners and users with the Organization administrator system role have full access to all resources in all stores in the organization, but might not have immediate access to a store in an organization. Learn more about how to access a new store in an organization.

System roles are predefined and can't be edited. The following table describes the different system roles that you can assign to your users.

System roles that are available for your organization users.

Role name	Role category	Permissions	Limitations
Organization administrator	Organization role	The Organization administrator role grants a user the following permissions: View, create, edit and delete all resources within the organization, including finance and billing. View, create, edit, and delete users, roles, and groups. Assign and remove all roles. Assign and remove all groups. Access to all stores and all POS locations within the organization.	The Organization administrator role has the following limitations: Can't modify system roles designed and maintained by Shopify. Can't perform ownership transfers. Assigned only by Organization owner and Organization administrator roles. Can't have access conditions attached to its assignment.
Store user administrator	Store role	The Store user administrator role grants a user the following permissions: Manage all users in assigned stores. Add users to assigned stores. Assign or remove any store category roles to users in assigned stores. Delete users in assigned stores.	The Store user administrator role has the following limitations: Can't create or edit roles. Can't view, create, edit, or delete non-user resources, such as products or orders. Can't create, edit, delete, assign, or remove users from groups. Can't suspend users. Can't delete users from the organization.

Custom roles

You might have some predefined roles available that you can further customize.

The following table describes the different predefined custom roles that you can assign to your users or customize further. Learn more about creating custom roles.

Predefined custom roles available for your stores in your organization.

Role name	Role category	Pre-selected permissions
Online store editor	Store role	The Online store editor role grants a user the following store-level permissions: Home All permissions in Online store All permissions in Content All permissions in Files, except Delete
Customer support	Store role	The Customer support role grants a user the following store-level permissions: Home All permissions in Orders All permissions in Draft orders
Merchandiser	Store role	The Merchandiser role grants a user the following store-level permissions: Home All permissions in Products All permissions in Catalogs All permissions in Content All permissions in Files, except Delete
Marketer	Store role	The Marketer role grants a user the following store-level permissions: Home All permissions in Marketing All permissions in Customers