Descriptions of store role permissions
Permissions grant or restrict access to specific areas of your Shopify admin, such as Products, and granular tasks within those areas, such as viewing, editing, or deleting. You can assign permissions to user roles to determine the level of access that a user role has to your store.
To allow your users access to help you to run your store, you need to create roles with the relevant permissions to access specific parts of your Shopify admin and for specific features or tasks. You can grant users a high level of access or limit their access to very specific functions, depending on their position in your business.
Users with reduced permissions have a scaled back view of the Shopify admin as soon as you save the permissions.
Automatically selected permissions
You might need to give users multiple permissions to complete tasks in a particular area of your Shopify admin.
You can select the top level permission to automatically select all permissions in that permission category, as well as any required permissions in other categories.
When you assign a permission that has additional dependancies or requiree permissions, the required permissions are automatically selected as well. If you deselect a required permission, then all other dependant permissions deselect automatically as well.
Some related permissions aren't required, but not granting the permission limits the user's ability to complete tasks. For example, if you create an Blogger role to manage your online store's blog, and grant the Themes, Blogs and blog pages, and Online store permissions, but don't grant the user any Files permissions, then that user can't add any new images to blog posts. Make sure to review the tasks that you might want a user role to be able to fulfill, and assign the relevant permissions.
Store permissions
Permissions are grouped into the following categories:
- Home
- Orders
- Draft orders
- Products
- Catalogs
- Gift cards
- Customers
- Analytics
- Marketing
- Discounts
- Content
- Files
- Online store
- Companies (Shopify Plus plan only)
- Users (Deprecated for role-based access control)
- App development
- Store settings
- Finance
Home
| Permission | Description |
|---|---|
| Home | This permission allows users to view the Home page, which includes sales information and other store data. |
Orders
| Permission | Description |
|---|---|
| View | This permission allows users to view orders. |
| Manage order information | This permission allows users to edit and update non-line item related attributes, such as customer information, shipping information, tags, and metafields, as well as take actions such as sending an invoice, archiving orders, or unarchiving orders. |
| Edit orders | This permission allows users to add or remove line items from orders. |
| Apply discounts | This permission allows users to apply discounts to existing or new line items in an order. |
| Set payment terms | This permission allows users to add payment terms to an order or edit existing payment terms. | Charge credit card | This permission allows users to collect payment by entering credit card information. |
| Charge vaulted card | This permission allows users to charge a vaulted credit card, which is credit card information that is stored in a credit card vault. This permission applies only to products that were bought through a deferred payment purchase option such as preorders or try before you buy. |
| Capture payments | This permission allows users to manually capture payments for orders. |
| Fulfill and ship | This permission allows users to fulfill and ship orders. |
| Buy shipping labels | This permission allows users to create and buy shipping labels. |
| Return | This permission allows users to create and process returns. |
| Refund | This permission allows users to refund and restock orders. |
| Cancel | This permission allows users to cancel orders. |
| Export | This permission allows users to export orders. |
| Delete | This permission allows users to delete orders. |
| Abandoned checkouts > Manage | This permission allows users to manage abandoned checkouts. |
Draft orders
| Permission | Description |
|---|---|
| View | This permission allows users to view draft orders. |
| Create and edit | This permission allows users to create and edit draft orders, duplicate orders, send and share an invoice, and update customer contact and shipping information.
This permission requires at least one payment permission for users to convert a draft order to an order. Payment permissions include:
|
| Apply discounts | This permission allows users to apply and remove custom line item and order discounts. Staff will also need the Discounts permission to apply discount codes.
This permission requires the following additional Draft orders permissions:
|
| Set payment terms | This permission allows users to set the payment terms for draft orders and convert the draft order to an order. |
| Charge credit card | This permission allows users to collect payment by entering credit card information. |
| Charge vaulted card | Allows staff to charge a vaulted credit card for a draft order, which is credit card information that is stored in a credit card vault. |
| Mark as paid | This permission allows users to mark draft orders as paid. |
| Export | This permission allows users to export draft orders. |
| Delete | This permission allows users to delete draft orders. |
Products
| Permission | Description |
|---|---|
| View | This permission allows users to view products.
This permission doesn't allow users to view product costs. |
| View cost | This permission allows users to view product cost. |
| Create and edit | This permission allows users to create, edit, import, publish, share, and archive products and collections.
This permission doesn't allow users to edit product cost or product price. |
| Edit cost | This permission allows users to edit product cost. |
| Edit price | This permission allows users to edit product price. |
| Export | This permission allows users to export products and inventory. |
| Delete | This permission allows users to delete products, variants, and collections. |
| Inventory > Manage | This permission allows users to create, transfer, track, import, and export inventory.
Allows users to edit inventory quantities, SKUs, and barcodes. Allows users to view the history of inventory adjustments for products and variants whose inventory is being tracked by Shopify. |
Catalogs
All catalogs permissions also require the View products permission. When you select any catalog permission, the View products permission is automatically selected and can't be deselected.
| Permission | Description |
|---|---|
| View | This permission allows users to view catalogs. |
| Create and edit | This permission allows users to view, create, edit, archive, and import catalogs. |
| Delete | This permission allows users to delete catalogs. |
Gift cards
| Permission | Description |
|---|---|
| View | This permission allows users to view and send gift cards. |
| Create and edit | To create or edit customers from the Gift cards page, then you also need to grant the Customers > View permission. |
| Export | This permission allows users to export gift cards to a CSV file. |
| Deactivate | This permission allows users to view gift cards, and to export gift cards to a CSV file. |
Customers
| Permission | Description |
|---|---|
| View | This permission allows users to view customer profiles. |
| Create and edit | This permission allows users to create and edit customer profiles. |
| Erase personal data | This permission allows users to request that a customer's data be erased. |
| Request data | This permission allows users to request that a customer's data be exported in CSV format to be sent to the customer.
This is a sensitive permission. |
| Export | This permission is required for users to export customer profiles. |
| Merge | This permission allows users to merge customer profiles. |
| View store credit transactions | This permission allows users to view details of store credit account transactions. |
| Edit store credit | This permission allows users to debit and credit a customer's store credit account. |
| Delete | This permission allows users to delete customer profiles. |
Analytics
| Permission | Description |
|---|---|
| Reports | This permission allows users to view and create reports, which includes sales information and other store data. You can't specify which reports users can access.
Users also need the View products permissions to filter by Sales Channel in the Finance reports summary page. |
| Dashboards | This permission allows users to view the Overview and Live view pages, which include sales information and other store and sales channels data. |
Marketing
| Permission | Description |
|---|---|
| View, create, and delete campaigns | This permission allows users to view, create, and automate marketing campaigns.
|
Discounts
| Permission | Description |
|---|---|
| View, create, and delete | This permission allows users to view and create discount codes and automatic discounts, and to export discounts to a CSV file. |
Content
| Permission | Description | Menus | This permission allows users to view, create, change, and delete menus. |
|---|---|
| Metaobject definitions | |
| View | This permission allows users to view metaobject definitions, including the details and all associated entries. |
| Create and edit | This permission allows users to create and edit metaobject definitions. |
| Delete | This permission allows users to delete metaobject definitions. |
| Entries | |
| View | This permission allows users to view metaobject entries. |
| Create and edit | This permission allows users to create and edit metaobject entries. |
| Delete | This permission allows users to delete metaobject entries. |
Files
If a user has permissions for areas that use file content, such as Products or Online store permissions, but no Files permissions, then they have limited access to that content. A preview of any existing content is still displayed, and they can add or remove content already in Files. To fully view or edit the content, upload new content, or delete the content from the Shopify admin, assign the Files permission to the user.
For example, if a user has Products permissions only, and they want to add an additional product image to a product, then they can review thumbnails of the product's media. The user can choose from the existing content in Files and add it to the product, but they can't upload new product media.
The View, Create, and Edit Files permissions are automatically selected when you assign users any of the following permissions:
- Any of the following Content permissions:
- Metaobjects definitions
- Entries permissions, including View, Create and Edit, and Delete.
- Any Products permissions.
- Any of the following Online store permissions:
- Themes
- Blogs and pages
Learn more about uploading and managing files.
| Permission | Description | View | This permission allows users to view files. |
|---|---|
| Create | This permission allows users to upload files. |
| Edit | This permission allows users to edit files. |
| Delete | This permission allows users to delete files. |
Online store
| Permission | Description |
|---|---|
| Themes | This permission allows users to view, change, and publish any free or paid for themes in the Theme library section of the Themes page of your Shopify admin. It also gives users access to the command line interface (CLI) tool.
Users also need some Apps and channels permissions to install additional themes from the Shopify Theme Store or to purchase existing trial themes in the theme library. Manage and install apps and channels is required to install additional themes, and Approve app charges is required to install themes that have a cost associated with them. |
| Edit code | This permission allows users to modify the theme code directly through the code editor.
This permission doesn't block or prevent access to the Assets API. Access to the CLI tool is still given as part of the Themes permission. |
| Blog posts and pages | This permission allows users to view, create, change, publish, and delete blog posts and pages. |
Companies
| Permission | Description |
|---|---|
| View companies | This permission allows users to view companies and company locations. |
| Create and edit companies | This permission allows users to view, create, and edit companies and company locations. |
| Assign other users to company locations | This permission allows users to assign other users to specific company locations. |
| Delete companies | This permission allows users to delete companies and company locations. |
| Restrict permissions to assigned company locations | Restricts the admin to display only the Orders, Draft orders, Customers, and Companies associated with the company locations assigned to the user. All other pages in the admin won't be filtered by company. Some customer values, such as Amount spent order values, will display totals for all locations instead of just the total for locations the user is assigned. |
Users (Deprecated for role-based access control)
| Permission | Description |
|---|---|
| Edit permissions | This permission allows users to view and change permissions for users and collaborators.
The store owner can always edit any permissions. Users with the Edit permissions permission can edit permissions for other staff, but only permissions that they already have. For instance, a user who a role with the Edit permissions and Manage settings permissions must also have the Themes permission to give or remove the Themes permission to another users member. A user with Edit permissions can grant this permission to another user with the same permissions, but cannot revoke it. For security reasons, to give another user the Edit permissions permission, the user who gives the permission must have the same permissions as the user who is given the permission. This is a sensitive permission. |
| Add and remove | This permission allows users to add other users, and update or remove user accounts. |
| External login services | This permission allows users to view or update external login services on the Users and permissions page. |
| Revoke access tokens | This permission allows users to revoke user device permissions for Shopify apps such as Point of Sale, Shopify Inbox, or the Shopify app. Any user can revoke their own access, but only users with this permission can revoke access for other staff. |
| Collaborators > Manage collaborator requests | This permission allows users to review, accept, or decline collaborator requests to the store. |
App development
| Permission | Description |
|---|---|
| View apps developed by staff and collaborators | This permission allows users to view apps that are developed by your users or by collaborators. |
| Develop | This permission allows users to create and update custom apps that are installed on your store. |
| Enable development | This permission allows users to permit users and collaborators to develop custom apps. By default, custom app development isn't permitted.
This permission also requires Manage and install apps and channels permission so the user can access Apps and sales channels settings where they can create and install custom apps. |
Store settings
| Permission | Description |
|---|---|
| Manage settings | This permission allows users to access some pages of the administration options on the Settings page and Preferences page of your Shopify admin, and to create webhooks.
Learn about the minimum required permissions for access to administration tasks on the Settings page. |
| Checkout | This permission allows users to manage all the associated settings for checkout, such as configurations and customer contact method. |
| Shipping and delivery | This permission allows users to create, manage, and delete shipping and delivery settings. |
| Taxes and duties | This permission allows users to manage taxes and duties. |
| Locations | This permission allows users to create, change, and delete the locations where you stock or manage inventory. |
| Store credit | This permission allows users to manage store credit settings. |
| Domains | This permission allows users to view and edit domain settings. |
| Transfer domain to another Shopify store | This permission allows users to transfer the store's domain to another Shopify store. To transfer the domain, the user must meet the following criteria:
|
| View customer events | This permission allows users to view customer events, including app pixels and custom pixels. |
| Manage and add custom pixels | This permission allows users to manage and add custom pixels. |
| Store policies | This permission allows users to create and manage store policies. |
Finance
| Permission | Description |
|---|---|
| View billing and receive billing emails | This permission allows users to view, download, or export Shopify bills. They can also view billing information, payment methods and receive billing related emails. However, Collaborators who have this permission don't receive billing emails. |
| Edit billing payment methods and pay invoices | This permission allows users to add a payment method on the Billing page, and to pay billing invoices if a payment fails.
This is a sensitive permission. |
| Manage plan | This permission allows users to make changes to the store's subscription plan. Only the store owner can pause or deactivate the store. |
| Manage app billing | This permission allows users to view app billing charges for one-time purchases, app usage, and app subscriptions. |
| View Shopify Payments payouts | This permission allows users to view Shopify Payments settings, payouts, and transactions.
This permission also requires the Manage settings,Checkout, and Store setting permissions. |
| Manage other payment settings | This permission allows users to manage payment methods other than Shopify Payments, including PayPal, third-party providers, manual payments, and additional payment types.
This permission also requires the Manage settings permission. This is a sensitive permission. |
| View Balance account activity | This permission allows users to view Shopify Balance transactions and the amount available to spend. |
| View all Shopify Credit account activity | This permission allows users to view Shopify Credit transactions, Cardholder details, their spending limits and usage, and the remaining credit limit. |
App permissions
You can grant users access to view, access, install, and manage apps and sales channels other than Shopify POS.
You can grant access to all apps and sales channels, or check specific apps and sales channels for that user role instead.
If you check specific apps and sales channels, then the user can only access those apps and sales channels. They can't install or delete apps. If you install any additional apps in the future and want to grant access to the app in any of your user roles, then you need to update your user role's App permissions.
| Permission | Description |
|---|---|
| Manage and install apps and channels | This permission allows users to manage apps and channels if their permissions match the permissions that the app or channel requires. The user can add, access, or delete apps and channels. If any new apps or channels are installed in the future, then the user can access or delete those apps or channels without you updating this permission.
Users need the Manage and install apps and channels permission to install additional themes from the Shopify Theme Store. |
| Approve app charges | This permission allows users to install apps, or themes from the Shopify Theme Store that have a cost associated with them, such as a one-time charge or a recurring subscription. A user still needs to have the Approve app charges permission to install apps that offer a free trial period and then become a paid subscription. |