Understand roles

Roles grant access permissions that let you control how internal users access different parts of the Commerce administration interface and the Agent Console.

You can assign more than one role to each user profile. For example, if your subscription includes the Agent Console, you could assign a user both the Business User role to access the administration interface and the CS Agent role to access the Agent Console. See Create new user profiles for information about assigning roles.

Important: It is highly recommended for security reasons that you give each internal user the least amount of access he or she requires. For more information on secure practices, refer to Secure your Commerce Cloud logins.

The following table describes the roles you can assign to an internal user.

Role	Description
Administrator	Full access to the Commerce administration interface.
CS Agent	Full access to the Agent Console except Manual Adjustments. (Available only if your subscription includes the Agent Console.)
CS Agent Supervisor	Full access to the Agent Console. (Available only if your subscription includes the Agent Console.)
Account Manager	Full access to the Accounts page. (This feature may not be enabled in your environment. See Configure Business Accounts for more information.)
All Commerce	Full access to the administration interface except Access Control, Extensions, Extension Settings, Email Settings, and Web APIs. (Access to those settings is granted by the Administrator role.) This role is equivalent to the Business User role available in earlier releases. Profiles you created in earlier releases that include the Business User role are automatically updated to include the All Commerce role.
Catalog	Full access to the Catalog page. You must also assign the Media role if the user will upload images for products, SKUs, and collections.
Dashboard	Read access to the dashboard, which is the landing page for the administration interface that a user sees when they log into Commerce. All roles that control access to the administration interface let the user see the dashboard, but unless a profile is assigned the Administrator, All Commerce, or Dashboard roles, the user does not see the reports on the dashboard. A user who can see the reports section of the dashboard can only click through to view the full reports if their profile is assigned the Administrator, All Commerce, or Reporting roles.
Design	Full access to the Design page.
Marketing	Full access to the Marketing page.
Media	Full access to the Media page.
Preview	Access to the Preview button.
Publishing	Full access to the Publishing page.
Reporting	Full access to the Reports page.
Search	Full access to the Search page
Settings	Full access to all Settings pages except Access Control, Extensions, Extension Settings, Email Settings, and Web APIs. (Access to those settings is granted by the Administrator role.)

Additional roles are available for account-based storefront contacts. Refer to Configure Business Accounts for more information.