Understand role-based access control

Roles and access rights can affect how the agent works with the Agent Console.

The agent can process orders in two ways:

• Exclusively in the Agent Console; or
• On behalf of the shopper in the storefront.

If your administrator has placed access restrictions on properties of shoppers or orders, such as properties that hold shoppers' personal data, then an agent's roles and access rights may determine his or her access to those properties. This access can affect whether the agent can process an order for a shopper or whether the shopper is required to complete the order.

Use roles or access rights or both to provide the agent with access to properties required for placing an order or processing returns. For more information on creating agent roles and access rights, see Implement role-based access control for internal users in Extending Oracle Commerce.

Understand the effects of roles and access rights

When an agent uses the Agent Console to create or edit an order, or to process a return for a shopper, the agent’s roles and access rights may determine which properties are displayed and which can be updated.

To create an order, an agent must have access to the following:

• Shopper profile information (such as first and last name and email).
• Shipping and billing addresses.
• Shipping methods.

If roles or access rights restrict the agent from viewing any of this information, the agent cannot process the order. A shopper may also restrict an agent’s ability to view personal data. In either case, it would be the responsibility of the shopper to complete the order.

Understand roles when shopping as a shopper

Roles and access rights determine the properties the agent can see when working in the Agent Console. However, when the agent shops on behalf of a shopper in the storefront, only agent roles—not access rights—are used. The roles control the agent’s access to properties such as a shopper's personal data. If you restrict access to a property based on access rights, the property is not displayed to the agent on the storefront.

If the shopper does not grant permission for any of this personal data to be viewed, or if the agent role limits the agent from viewing any of this information, the agent is not able to create an order. The shopper would have to complete the order.