Admin Roles

Roles control a user’s access level to specific resources and services to prevent unauthorized access. By using roles, you decide what your users access and what actions they’re allowed to do on the requested resource, such as viewing a page. Roles are often based on criteria such as the user’s job or function. An initial role is selected when a new user is added, and the role can updated later if required. Storefront Gateway supports the following types of roles: Super Admin can use both the Admin and Care consoles and has full access to perform the following tasks:

Create OIDC clients (RPs) for Single Sign-On.
Set up integrations with supported social identify providers (Facebook, Google, etc.).
Manage application settings including password settings, multi-factor authentication, email/mobile formats, and other related security settings.
Admin User Management options to suspend/remove suspension and deactivate users.

A Care Representative can access the Care and Admin consoles and perform the following tasks:

Create new users except Super Admins.
View and modify Care Console Identity settings (including password reset and profile changes), Digital Subscriptions, and User Activity.
User management functions to unlock, suspend/remove suspension, deactivate all users except Super Admins.

Custom roles can be added to the Admin console. To request a custom role, contact your Storefront Gateway representative. Use Case Examples Some common use cases for your organization may be:

A Super Admin adds a new admin user to the team from the Admin console. The Super Admin selects the Care Representative role, and an invitation email is sent to that specific new admin user. Upon successful verification and authentication of the new admin user (care representative), they have full access to the Care console for user management.
Super Admin can view, list and manage an admin user’s status from the Admin Console. An example is when the Super Admin searches for and updates a Care Representative’s a role to Super Admin, thereby granting them full access to both the Admin and Careare consoles.

Organizations can manage personal identifiable information (PII) such as identity data, billing subscriptions, or financial records, with a strong security implementation using role assignments. Roles ensure that only the users with the appropriate privileges can access and perform actions on specific resources and services.

Admin Roles Details

Parent topic:Admin User Management

Admin Roles Details

The following Storefront Gateway Admin roles are available for assignment when creating a new user:

User Role	Description
Super Admin	The Super Admin role has permission to access both the Admin and Care consoles. This admin user manages the Connect services, resources, and can view/modify accounts from either console. The Super Admin role can create admin users and assign the Care Representative role to other users.
Care Representative	The Care Representative role has permission to access both the Admin and Care consoles. However, the Care Representative’s access to the Admin console is limited to the User Management section. This admin user can view end users’ identities and manage services in order to answer their queries.

Parent topic:Admin Roles

Home

Introduction

For Merchants

For Resellers

Partner Ecosystem Management

Commerce Engine

Storefront Experience

APIs

Admin Roles Details

​Admin Roles Details

Admin Roles Details