Additional user groups for granular security

The following tables list the various authorization roles that are predefined for the Commerce Server systems. For each authorization role of interest, create an associated user group on the domain controller, and add business user accounts to the user group as needed. For each user group that you create, assign the groups to authorization roles through the Authorization Manager.

Catalog and Inventory Systems:

Role Description
CatalogAdministrator Members can manage the Catalog System.
CatalogViewer Members have read access to the Catalog System.
CatalogManager Members can manage all the catalogs in the Catalog System.
SchemaManager Members can manage the catalog and inventory schema, including property, category, and product definitions.
CatalogSetsAdministrator Members can manage all the catalog sets.
CatalogSetsViewer Members can view all the catalog sets in the Catalog System.
InventoryAdministrator Members can manage the Inventory System.
InventoryViewer Members can view all the catalogs in the Inventory System.
InventorySynchronizationManager Members can synchronize the run-time Inventory System with the management system.
Administrator Members can manage the Catalog System and the Inventory System.

Marketing System:

Role Description
MarketingAdministrator Members have full access to every operation in the Marketing System.
MarketingApprover Members can approve or reject marketing items, such as campaigns, discounts, and expressions.
MarketingAuthor Members can create marketing-related items, such as customers, campaigns, discounts, and expressions.
MarketingViewer Members can view and search marketing items, such as campaign event logs.
GlobalExpressionAuthor Members can create, edit, and delete global expressions across multiple discounts.
RuntimeSiteManager Members can refresh the Discounts and Advertisements caches of the run-time site.

Orders System:

Role Description
OrdersAdministrator Members can manage data integrity and cleanup issues.
OrdersConfigurationEditor Members can manage orders configuration data for the site.
OrdersViewer Members have read access to view orders.
OrdersAdapter Members can search orders for order processing and updates.

Profiles System:

Role Description
ProfileAdministrator Members have complete access to the Profiles System.
ProfileWriter_BusinessManager Members of this scope-level role have access to the profile definition within the scope. There are six profile definitions: UserObject, Address, Organization, BlanketPO, CreditCard, and Currency.
ProfileWriter_CSR Members of this scope-level role have access to the profile definition within the scope.
ProfileWriter_Adapter Members of this scope-level role have access to the profile definition within the scope.