System Administration
User Roles
User Roles define a set of "resources" or permissions which assigned users will be granted access to. Granting only the permissions necessary for a user's legitimate needs and purpose is good practice because it:
- reduces risk should a user's account become compromised
- helps protect the privacy of your customer's data
- simplifies the user interface by removing functions that are not needed
Create a User Role
Navigate to System > Users, then click User Roles to access the User Roles grid.
Managing roles for Client Users is virtually the same except you would navigate to System > Users and click Client Users then Client User Roles.
- Navigate to the appropriate User Roles or Client User Roles grid and then click Add New Role.
- Choose a Role Name that describes what level of access users assigned to this Role with need or their job description (e.g. Accounting, Shipping, Customer Support, etc.).
For Organization User Roles select whether or not the role should be designated as Primary. This field does not appear or apply to Client Users.
It is strongly recommended notto designate any role providing System > Permissions > User Groups or System > Permissions >User Roles as Primary to prevent secondary users from "breaking out" of their limited access. See User Groups for more information.- If this role is used on a shared device with Microsoft Social Login, set End Social Login Session on Sign Out to Yes so signing out of ShipStream also ends the Microsoft session in that browser, and later Microsoft sign-ins on that browser ask for credentials instead of listing remembered accounts. This applies when any role assigned to the user has this set, so leave it No on every role of users who sign in from a personal computer. It does not apply to Google sign-in. This field does not appear on Client User Roles.
- Click the Role Resources tab in the left sidebar. Here you can determine which permissions the users assigned to this User Role (or Client User Role) will have.
- Choose Custom as the Resource Access type and check the boxes for the permissions you would like to grant to this role.
- Click Save Role.