Skip over navigation

Customer User Roles



See a short demo on how to create customer roles in OroCommerce, or keep reading the step-by-step guidance below.

In OroCommerce, you can view, edit and create new customer roles to define the level of permissions and access to the actions and data in the storefront for the users of this role.

The following roles are predefined and available for every customer by default:

  • Administrator
  • Buyer
  • Non-authenticated user

Any new role is labeled as customizable and may apply either to the customer specified in the role details or globally for all customers when the customer is not provided.


With the Customer User Role you can manage the following access- and permissions-related settings:

  • Profile management permission: A user may be able to view and edit their user profile, when the Self-Managed option is enabled for their role.
  • Permissions to view workflows and/or perform transitions through the workflow steps.
  • Data access/management permissions and capabilities.

Create a Customer User Role

To create a new customer user role:

  1. Navigate to Customers > Customer User Roles in the main menu.

  2. Click Create Customer User Role.

  3. In the General section, provide the following details:

    • Name — A human-readable label that identifies a customer user role.
    • Customer — A customer that has exclusive permission to use this role for their customer users. If the value is not provided, the role is available for all customers.
    • Self-Managed — The flag that indicates whether the customer user can manage their own roles configuration.
  4. In the Entity section, select the permissions that you want to grant to users who will be assigned the role you are creating.

    Entity permissions for a customer user role


    See the full list of permissions on the Permissions for Customer User Roles page.

    In the customer role details you can view customer users with this role assigned. If the role is global, this list contains users from all customer accounts.


    Please note that there are two ways to control the capability of a customer user to update their profile details in the storefront. One is defined by the Edit permission for Customer Users. When set to Same Level/All Levels, editing will become possible under Account > All Users in the storefront. The second one is defined by the Update User Profile capability which, when enabled, gives the customer user permissions to update details under Account > My Profile in the storefront.

  5. In the Workflows section, specify access levels for workflows and workflow transitions. There are two permissions for workflows, view and perform transitions. By default, all workflow access levels are set to None. Choose the workflow or the transition to which you want to assign different permissions, click on the action name and select the required access level from the list.

  6. In the Customer Users section, select check boxes in front of the customer users to whom you want to assign this role.

    The list of users who can be assigned the current customer user role
  7. Click Save

View and Filter Customer User Roles

To view all customer user roles:

Navigate to Customers > Customer User Roles in the main menu.


You can view, edit and filter every item in the Customer User Roles record table:

  • To view, click on the item once (or at the end of the row) to open its details page.
  • To edit, click at the end of the row.
  • To filter, click above the table on your right, and specify the query.


Keep in mind that only those customer user roles that have been created in the current organization will be displayed in the Customer User Roles record table of the current organization.

Related Articles

Browse maintained versions:3.11.6
Back to top

You will be redirected to [title]. Would you like to continue?

Yes No