Setup & usage team & shop permissions
This page walks you through creating staff accounts, adding them to shop teams, and configuring role-based capabilities in Settings so your team can work safely under one license.
Introduction
What you’ll do in this flow
A quick 4-step overview that matches the web navigation.
- Staff — Create staff accounts (system role STAFF) on /staff.
- Shops — Use Team to add/remove members and set roles (Manager / Fulfiller / Viewer). Use Quick assign only when you want a single fulfiller and to set the fulfillment credential owner (Lenful / Merchize tokens).
- Settings — Configure Orders defaults and the role capability matrix (MANAGER / FULFILLER / VIEWER).
- Operate — Staff will only see actions they’re allowed to perform (Orders, Designs, shop actions, etc.).
Staff accounts
The Staff page
Only USER / ADMIN can manage staff accounts.
After creating an account, add them to a shop team. On each shop they also have a membership role (MANAGER / FULFILLER / VIEWER). What they can actually do is controlled by the capability matrix in Settings.
Shops & teams
Manage a shop team
On the Shops page, use the Team button on each shop card.
In the Team dialog you can view current members, change roles, remove access, or add new staff with a role. Use Quick assign only when you want to replace the entire team with a single Fulfiller and set that user as the fulfillment credential owner (Lenful/Merchize tokens).
The shop card shows the team list and role badges. Detailed capabilities (export, sync, edit shop, etc.) are governed by the Settings capability matrix.
Fulfillment store connection
syncToProvider capability (per their membership role). Owners (USER/ADMIN) can always connect fulfillment providers for their shops.Settings
Orders — default filters
Auto-expand fulfillment
Staff role permissions (matrix)
This is the single source of truth for staff capabilities.
Defaults reflect typical workflows (e.g. FULFILLER can fulfill and sync; MANAGER can manage members and edit shop info; VIEWER is read-only). Override any cell to match your business process.
Roles & recommended usage
MANAGER
Operational manager. Often does not need to fulfill orders.
FULFILLER
The person responsible for syncing and fulfilling orders.
VIEWER
Read-only monitoring role.
Orders & Designs
Orders
Staff only see orders from shops they are members of. Actions like Sync all, Export, multi-select, and per-order sync are shown/hidden based on the capability matrix and the current shop filter.
To avoid showing incorrect actions before permissions are loaded, the UI defaults to deny for staff until per-shop capabilities are available from the Shops API.
Designs
manageDesigns capability controls whether staff can edit/delete designs or only view them.FAQ
A staff member sees a button but the API returns 403.
I want someone to view orders but not export.
exportOrders disabled (it is disabled by default).