User Roles
Create and configure admin user roles to control which screens and features each team member can access in the Unified Admin.
User Roles control what admin users can see and do inside the Unified Admin. Each role defines a set of screen-level permissions -- when an admin user is assigned a role, they can only access the screens that role grants. If a user navigates to a screen they do not have access to, they are redirected to an access-denied page.
Roles are scoped to your storefront. You can create as many roles as needed (e.g., "Sales Rep" with access to Orders and Reports only, or "Content Editor" with access to CMS pages only). Screens are organized into groups -- Print Store, Print Editor, Partner Integration, Users, Pages, Pricing, and Settings -- so you can quickly grant or revoke access by functional area. Some screens may appear disabled if the feature is not available on your current plan.
View User Roles
- From your Unified Admin, go to Users > User Roles.
- The page header contains a dropdown labeled Select Role and change it's capabilities. Choose a role from the dropdown to view its current permissions.
- The page is divided into two panels: a Group sidebar on the left and a screen list on the right.
Role Dropdown and Actions
| Control | Description |
|---|---|
| Select Role dropdown | Lists all roles for the current storefront. Select a role to load its screen permissions. Super Admin roles are excluded from this list. |
| Delete | Deletes the currently selected role. A confirmation dialog appears. Deletion fails if the role is currently assigned to any customer -- you must unassign it first. |
| Add role | Opens a dialog to create a new role (see Add/Rename Role below). |
| Rename | Opens a dialog pre-filled with the selected role's name and description so you can edit them. |
| Save | Saves the current screen permission changes for the selected role. |
Group Sidebar
The left panel shows permission groups with the total number of screens in each group. Click a group to filter the screen list on the right to only show screens in that category.
| Group | Description |
|---|---|
| All | Shows every available screen across all groups. The count reflects the total number of screens in the system. |
| Print Store | Screens related to storefront management: products, categories, collections, orders, site themes, etc. |
| Print Editor | Screens related to the design editor: editor products, templates, fonts, elements, etc. |
| Partner Integration | Screens for third-party integrations: Presswise, SiteFlow, Zapier, etc. |
| Users | Screens for user management: customers, admin users, organizations, user groups, user projects, user carts, and user roles. |
| Pages | Screens for CMS content management: blog, page content, product content, HTML snippets, email templates, etc. |
| Pricing | Screens for pricing configuration: base pricing, promo codes, tax/VAT settings. |
| Settings | Screens for system settings: general settings, checkout, shipping, merchants, API keys, domain tools, etc. |
Screen Permission List
The right panel displays checkboxes for each screen in the selected group. Each checkbox represents a single admin screen.
| Control | Description |
|---|---|
| Select All | Checkbox that grants or revokes access to all screens in the current view at once. Automatically checked when all individual screens are granted. |
| Quick Filter | Text input that highlights matching screen names as you type, making it easy to find a specific screen in a long list. |
| Granted Only | Checkbox that filters the list to show only screens that are currently granted to this role. Useful for reviewing what a role can access. |
| Screen checkboxes | Each checkbox represents a single screen. Check to grant access, uncheck to revoke. Disabled checkboxes (with tooltip "Feature is not available on your current plan") indicate screens gated by your subscription tier. |
Add / Rename Role
Click Add role or Rename to open the role dialog.
| Field | Description |
|---|---|
| Role Name | Required. A descriptive name for the role (e.g., "Sales Rep", "Content Editor", "Order Manager"). This name appears in the role dropdown and when assigning roles to users. |
| Role Description | Required. A brief description of the role's purpose. Helps other admins understand what this role is intended for. |
Click Save to create (or update) the role, or Cancel to close without saving. New roles are created with no screens granted -- you must select the desired permissions and click Save on the main page.
Assigning Roles to Users
Roles are assigned to admin users through the Site Users edit page. Navigate to Users > Site Users, edit a user, and use the Roles tab to add or remove role assignments. Each user can have multiple roles -- their effective permissions are the union of all assigned roles.
Associations
Unified Admin
| Area | Effect |
|---|---|
| Admin navigation | When an admin user logs in, the system queries UserRoleMap and ScreenRoleMap to build the list of available screens. The sidebar navigation only shows menu items the user has access to. |
| Route guard | Every admin route is protected by RoleGuard, which checks the route's screenName against the user's availablePages list. Unauthorized access redirects to an access-denied page. |
| Super Admin bypass | Users with the Super Admin tier automatically have access to all screens, bypassing the role-screen mapping entirely. |
| Plan-based restrictions | Screens are cross-referenced against the storefront's subscription plan via FeatureMapService. Screens not included in the plan appear disabled regardless of role assignment. |
Print Store
| Area | Effect |
|---|---|
| Guest registration | The storefront checks UserRoleMap entries during guest registration and checkout to validate whether a customer already exists for the company. |
Related Pages
- Site Users — assign roles to users from the Roles tab on their profile
- Admin Users — view all users who have at least one role assigned
- User Groups — organize customers into groups for storefront access control