This add-on lets you give staff access to specific parts of your store without making them full WordPress administrators. Grant someone the ability to manage orders but not settings, or products but not customers.
Plan: Pro Add-on: Role & Permission Where: StoreEngine → Settings → Staff & Permissions
What You Can Do
• Add staff and grant access per area: Orders, Products, Coupons, Customers, and more.
• For each area, choose actions: View, Create, Update, Delete.
• Grant access to Pro add-on areas (POS, Inventory, Returns, AI, etc.) — appear only when that add-on is active.
• Admin-only screens (Dashboard, Analytics, Add-ons, Tools, Logs) are always off-limits to staff.
Turn On Role & Permission
1. Go to StoreEngine → Add-ons.
2. Toggle on Role & Permission (requires Pro).
3. Manage staff at StoreEngine → Settings → Staff & Permissions.
Add and Configure a Staff Member
4. Go to Settings → Staff & Permissions.
5. Click Add staff and search for the WordPress user.
6. Toggle the permissions they should have — for each resource, enable the verbs: View, Create, Update, Delete.
7. Save.
| Note: Granting an action automatically grants matching View access. The admin menu only shows areas a staff member can use — everything else is hidden. |
After adding role and permission, if need you can edit the permission.
How Permissions Combine
• Granting Create/Update/Delete automatically grants View for that resource.
• Real administrators always keep full access — staff can never reach admin-only screens.
• Permission changes take effect on the staff member’s next action.
Troubleshooting
|
Problem |
What to Check |
|
Staff member cannot see an area you granted |
Confirm permission is saved and have them reload. |
|
Staff can view but cannot edit |
They have View only — enable Update and/or Create/Delete for that resource. |
|
A Pro add-on area is not listed |
That add-on must be active and Pro licensed for its permission group to appear. |
|
Staff member can still reach Analytics/Add-ons |
They cannot — those are admin-only and always blocked for staff. |
|
Revoked access did not take effect |
It applies on the next request — ask them to reload. |