Admin Console and storefront role permissions

  • Updated

The Admin Console and storefront have unique roles for managing various tasks, including managing content displayed on the storefront. Admin Console roles are prefaced with "ISC_" to differentiate them from storefront user roles.

Each role can only access certain areas of the Admin Console based on predefined permissions. The tables below provide the default permissions for each Admin Console role, but you can customize these permissions.

  • ISC_System – Optimizely-only role and is listed here for reference purposes only.
  • ISC_Implementer – Created for partners doing implementation. It has access to almost everything the ISC_System role has, but some settings are hidden from users with this role.
  • ISC_FrontEndDev – Provides access to the storefront and Themes & Content sections.

Custom roles

If you choose to create a custom role related to content creation or access to the storefront, the ability to publish content is assigned only to the applicable roles listed below, and you cannot add the ability to publish to your custom role.

Admin Console permissions

Permission ISC_System ISC_Admin ISC_Implementer ISC_FrontEndDev ISC_Integration ISC_User ISC_ContentAdmin ISC_ContentEditor ISC_ContentApprover
Manage integration jobs X X X   X        
Manage admin and system users X X* X*     X*      
Access CKFinder X X X X X   X X  
View and update website SEO settings X X X            
Access to debug menu X   X            
Application dictionary X X X            
Themes & Content menu X   X X          
Create revision (CK editor) X X X X     X X  
Publish (CK editor) X X X X     X   X
Delete revision (CK editor) X X X X     X   X

Preview revision (CK editor)

 X X X X     X X X
View and update settings X X* X*            

* – denotes limited permissions

Admin Console permission notes

  • Manage integration jobs – Jobs > Connections, Jobs > Job Definitions, and Jobs > All Job History are read-only for users without permissions.
  • Manage admin and system users – Cannot assign or remove higher-level roles. The ISC_User role cannot see the Console Users section. However, they have full permissions in the Website Users section to add, delete, edit, or assign.
  • Access CKFinder – Opening the CK finder is disabled, and the Library > Media section is hidden for users without permission.
  • View & update website SEO settings – Website > SEO tab hidden for users without permission.
  • Access to debug menu – Debug icon hidden for users without permission.
  • Application dictionary – Administration > Application Dictionary link hidden for users without permission.
  • Themes & Content – Themes & Content is hidden for users without permission.
  • Create revision (CK editor) – Related button disabled for those without permission.
  • Publish (CK editor) – Related button disabled for those without permission.
  • Delete revision (CK editor) – Related button disabled for those without permission.
  • Preview revision (CK editor) – Related button disabled for those without permission.
  • View and update settings – Settings is hidden for users without permission.

See the Users documentation section for information on user management. For example, how to create users from the website and from the Admin Console.

Storefront roles

These Admin Console roles provide access to manage content displayed on the storefront in addition to the access they provide to the Admin Console.

To access the Admin Console and make edits to the storefront, a user needs the ISC_User role in addition to the necessary storefront roles.

 

ISC_ContentAdmin

ISC_ContentEditor

ISC_ContentApprover

ISC_Implementer

ISC_FrontEndDev

Use CMS shell

x

x

x

x

x

Create page

x

x

  

x

x

Edit page

x

x

  

x

x

Delete page

x

    

x

x

Add linked page

x

x

  

x

x

Unlink page

x

x

  

x

x

Widget permissions

x

x

  

x

x

Template permissions

x

    

x

x

Preview page

x

x

x

x

x

Publish page

x

  

x

x

x

Clear future publish

x

  

x

x

x

Rollback

x

x

  

x

x

Rollback and publish

x

    

x

x

Storefront permission notes

  • Use CMS shell – CMS shell is automatically displayed when users with these permissions are signed into the Admin Console and go to the storefront.
  • Create page – Option in drop-down list is hidden for those without this permission.
  • Edit page – Option in drop-down list is hidden for those without this permission.
  • Delete page – Option in drop-down list is hidden for those without this permission.
  • Add linked page – Option in drop-down list is hidden for those without this permission.
  • Unlink page – Option in drop-down list is hidden for those without this permission.
  • Widget permissions – Permission to create, edit, and delete widgets.
  • Template permissions – Permission to view, create, edit, and delete templates.
  • Publish page – Roles without this permission see Submit For Approval after clicking Publish.
  • Clear future publish – Roles without this permission do not have the option to clear the publish date when attempting to publish a page with a future publish date.
  • Rollback – Restore button is hidden in the CMS header for roles without this permission.
  • Rollback and publish – Restore and Publish button is hidden in the restore modal for roles without this permission.