You are here:
Roles Managed in Account Manager
Use this table as a guide to the B2C Commerce Account Manager roles.
Only users with the Account Administrator role can assign the Account Administrator and Control Center Administrator roles.
| Service Name | Role Name | Target Type | Scope of Role | Allowed Actions |
|---|---|---|---|---|
| Account Manager | Account Administrator | User/API Client | Organization | Permits this user to view other user accounts. Permits this user to add other user accounts. Permits this user to edit other user accounts. Permits this user to edit API clients for their organization. Only user accounts within the same organization are visible. If a user with the Account Administrator role is assigned to multiple organizations, the user is the Account Administrator for all of the assigned organizations. |
| Account Manager | API Administrator | User/API Client | Organization | Permits the account to view API client IDs. Permits the account to add API client IDs. Permits the account to edit API client IDs. Enables the Account Manager API Client tab for the user. |
| Account Manager | User Administrator | User/API Client | Organization | Permits the user to manage the lifecycle of user accounts within their organization. This includes adding, inviting, and deleting users, and resetting passwords, unlocking accounts, and purging users. Permits the user to manage organization assignments, roles, and tenant filters for users, and to delete MFA verifiers. Users with this role can view user change logs and assign the User Administrator role to others, but cannot assign the Account Administrator role. |
| Account Manager | Read Only Account Administrator | User/API Client | Organization | Permits the user read only access to the organization's details, API clients and users. Users with this role can't update or create organizations, API clients, or users. |
| B2C Commerce Developer Experience | Sandbox API User | User | Specific Business Manager Instance | Permits the user to manage on demand sandboxes (ODS) with the ODS REST API. It also provides a Control Center role to access and manage ODS in Control Center. |
| B2C Commerce managed Runtime | Managed Runtime User | User | Specific Business Manager Instance | Allows access to Commerce Runtime Manager as part of a specific organization. |
| B2C Commerce Managed Runtime | Managed Runtime Administrator | User | Specific Business Manager Instance | Allows admin access to Commerce Runtime Manager as part of a specific organization, allowing the admin to create projects and assign project permissions |
| Control Center | Control Center Administrator | User | For all Business Manager Instances | Permits the user to act as an administrator within their primary org. The user is granted administrative access to all instances of their primary organization in Control Center. Administrators can assign permissions to any instance of any realm in their organization to users in their own organization or another organization. This role allows Users to view audit logs, and to view users and manage roles in their primary org. See Control Center documentation for more details. |
| Control Center | Control Center User | User | For all Business Manager Instances | Permits use of the Control Center application. Users with this role can assign and unassign the permissions they received to an instance within Control Center (through direct assignment or role assignment). If the user has the Grant Permissions permission, they can assign the permission they received to other users assigned to the instance. See Control Center documentation for more details |
| CQuotient | CQuotient Configurator User | User | Specific Business Manager Instance | Permits basic read and write access to individual sites. |
| eCommerce Platform and Business Manager | Business Manager Administrator | User | Specific Business Manager Instance | Permits full administrative access to a Business Manager instance. |
| eCommerce Platform and Business Manager | Business Manager User | User | Specific Business Manager Instance | Permits the user to log in to a Business Manager instance but doesn't automatically assign any BM roles beyond that. Administrators for the Business Manager instance can set up rules to assign some local roles upon a user's first login. See Business Manager documentation for more details. |
| Log Center | Log Center User | User | Specific Business Manager Instance | Permits the user to access logs for a specific tenant and realms. Access to log messages is managed through tenant filters and Business Manager instances. Defining Business Manager instance for this role is mandatory. The role has access to the following Log Center features: log messages visualization, management of it's own save searches and notifications. |
| Log Center | Log Center External Admin | User | Specific Business Manager Instance | Permits the user to view security logs, access logs for a specific tenant and realm, and complete the actions allowed under the Log Center User Role. Access to log messages is managed through tenant filters and Business Manager instances. Defining a Business Manager instance for this role is mandatory. The role grants access to these Log Center features: Log message visualization, and management of the user’s saved searches and notifications. |
| OCAPI Explorer | OCAPI Explorer Debug User | User | Tenant/Realm/Instance | Permits the user to access OCAPI request debug information on a per tenant, realm, and instance basis. |
| Reports and Dashboards (R&D) | Reports and Dashboards Customer Manager | User | Specific Business Manager Instance | Permits the user to view the Reports and Dashboards for their realm and access the Reports and Dashboards settings page for their realm. |
| Reports and Dashboards (R&D) | Reports and Dashboards User | User | Specific Business Manager Instance | Permits the user read only access to the Reports and dashboards for their realm. |
| Reports and Dashboards (R&D) | Reports and Dashboards Performance User | User | Specific Business Manager Instance | Permits access to the Performance dashboard in R&D |
| SLAS Shopper Admin API | Salesforce Commerce API | API Client | Specific Business Manager Instance | Permits the user to access the Salesforce Commerce APIs. |
| SLAS Shopper Admin API | SLAS Organization Administrator | User | Specific Business Manager Instance | Assigns the Merchant role for management of SLAS tenant level configuration. |
| B2C Commerce Developer Experience | Sandbox API User | User/API Client | Specific Business Manager Instance | Permits the user to create new on-demand sandboxes (ODS) using the REST API in AWS sandbox environment. This role also grants users access to ODS functionality within Control Center. |
Did this article solve your issue?
Let us know so we can improve!
