Configuring user permissions

As with developers, you may want to limit your exposure to damage by giving users of your Magento 2 backend limited access to only the tools and capabilities they need. We know it's easier to simply share your login credentials with your staff, but if or when there comes a time to dismiss a staff person—or if they leave for another job opportunity—you must change your login credentials if you want to eliminate their access.

Additionally, sharing credentials reduces accountability in terms of knowing who did what and when.

The community version of Magento 2 provides you with the tools to provide credentials to as many users as you need as well as create roles that limit access to the features and functions of your store's backend.

Managing roles

In Magento, each user is assigned a role. A role defines the access that a user has to various parts of the backend as well as their capability to change or delete certain records. When your store is initially created, an...