Staff Accounts & Role-Based Permissions
Invite team members and enforce granular permissions across orders, catalog, and finances
Why Multi-User Role Access is Essential
As your e-commerce business grows, managing operations alone becomes impossible. You will hire fulfillment staff, customer care agents, photographers, and accountants.
Sharing your primary store login password is a severe security risk. A warehouse assistant packing boxes should never be able to alter your payout bank account or delete your catalog. Teyweb solves this with Role-Based Access Control (`UsersPermissionsPage.tsx`).
The 6 Standard Administrative Roles
Teyweb defines 6 standard administrative roles tailored to retail operations:
Superadmin (Store Owner)
Unrestricted full control over all store settings, financial payouts, banking accounts, billing subscriptions, staff invitations, and store deletion.
Manager (General Operations)
Can manage catalog products, fulfill orders, coordinate delivery logistics, and create discount promotions. Restricted from altering payout accounts or deleting the store.
Finance (Accountant & Bookkeeper)
Access to financial transactions, sales ledgers, payout histories, settlement reconciliation, and refund requests. Cannot modify storefront themes or product details.
Support (Customer Care Rep)
Can search orders, inspect customer shipping addresses, view delivery statuses, and answer customer support tickets. Cannot initiate financial refunds or edit pricing.
Moderator (Content & Reviews)
Can moderate incoming customer product reviews, reply publicly on behalf of the store, and draft custom CMS pages and blog posts.
Tech (Web Developer / Designer)
Access to the Theme Customizer, custom domain DNS verification, storefront templates, and CMS page editors. Cannot access financial or customer payout records.
Granular Role Permission Matrix
The table below summarizes the exact permissions enforced by Teyweb's `PermissionRouteGuard`:
| Permission Scope | Superadmin | Manager | Finance | Support | Moderator | Tech |
|---|---|---|---|---|---|---|
| Products & Catalog (`products`) | Full Access | Full Access | View Only | View Only | View Only | Full Access |
| Orders & Fulfillment (`orders`) | Full Access | Full Access | View Only | View Only | No Access | No Access |
| Transactions & Payouts (`transactions`) | Full Access | No Access | Full Access | No Access | No Access | No Access |
| Store Settings & Themes (`settings`) | Full Access | Limited | No Access | No Access | Limited | Full Access |
| Staff Management (`users`) | Full Access | No Access | No Access | No Access | No Access | No Access |
| Account Danger Zone (`danger`) | Full Access | No Access | No Access | No Access | No Access | No Access |
Inviting Staff & Activation Tokens
To invite a team member:
1. Go to Settings > Users & Permissions.
2. Click "+ Invite Team Member".
3. Enter the staff member's Full Name, Email Address, and select their assigned Role.
4. Click "Send Invitation".
5. Teyweb sends a secure cryptographic activation link to their email (e.g. `app.teyweb.com/role/activate/{token}`).
6. The staff member clicks the link, sets their own private password, and accesses your dashboard with their assigned permissions.
Revoking Staff Access & Security Audits
If an employee leaves your company, go to Settings > Users & Permissions, find their name, and click "Revoke Access".
Their active login session is terminated immediately, preventing any further access to your store.
Was this guide helpful?
Help us improve our merchant documentation by sharing your feedback.