Roles & Permissions
Roles and permissions control access for different user types, ensuring that only authorized users can make changes with appropriate approval processes for high-risk operations.
Overview
Roles and permissions ensure that team members have the right level of access to merchandising features. Roles are configured in the Teams tab, and each user is assigned a role that determines what they can view and modify.
Managing Roles in the Teams Tab
Viewing Team Members
- Navigate to Operations → Teams (or go directly to the Teams tab)
- View the list of all team members and their assigned roles
Assigning Roles to Users
- Go to the Teams tab
- Find the user you want to assign a role to
- Click on the user's current role (or the Edit button)
- Select a role from the dropdown:
- Owner: Full access to all features and settings
- Developer: Technical access for integrations and API usage
- Merchandiser: Can create and edit merchandising rules, view analytics
- Analyst: Read-only access to analytics and reporting
- (Additional roles may be available based on your plan)
- Click Save to apply the role
Creating Custom Roles (if available)
- In the Teams tab, click Manage Roles or Role Settings
- Click Create New Role
- Enter a role name (e.g., "Senior Merchandiser", "Content Manager")
- Configure permissions by toggling access for:
- Merchandising Controls: Create/edit boost/bury, pinning, exclusions, campaigns
- Ranking Strategy: Modify LLM ranking settings, personalization, intent handling
- Analytics: View analytics, export data
- Experimentation: Create and manage A/B tests
- User Management: Invite users, assign roles
- Settings: Modify account settings
- Set approval requirements for high-risk changes (if applicable)
- Click Save Role
Role Examples
Owner
- Full access to all features and settings
- Can manage users and roles
- Can approve high-risk changes
- Can modify account settings
Developer
- Technical access for integrations and API usage
- Can view analytics and technical metrics
- Typically read-only for merchandising controls (unless specifically granted)
Merchandiser
- Can create and edit merchandising rules (boost/bury, pinning, exclusions, campaigns)
- Can view analytics and export data
- May require approval for high-risk changes (e.g., deleting rules, major campaign changes)
- Cannot modify user roles or account settings
Analyst
- Read-only access to analytics and reporting
- Can export data for analysis
- Cannot make any merchandising changes
- Cannot view or modify user settings
Approval Workflows
For high-risk changes, approval workflows can be configured:
- Navigate to Operations → Workflows
- Configure which actions require approval:
- Deleting merchandising rules
- Major campaign changes
- Ranking strategy modifications
- User role changes
- Set who can approve (e.g., Owners, specific roles)
- Configure notification settings for approval requests
When a user attempts a change that requires approval:
- The change is submitted for review
- Approvers receive a notification
- Approvers can review and approve or reject the change
- The user is notified of the decision
Best Practices
- Principle of least privilege: Grant minimum necessary permissions—only give users access to what they need
- Use appropriate roles: Assign roles that match job functions (e.g., merchandisers get Merchandiser role, analysts get Analyst role)
- Require approvals: Enable approval workflows for high-risk changes to prevent mistakes
- Review regularly: Periodically review team member roles and permissions to ensure they're still appropriate
- Document roles: Keep clear documentation of what each role can do
- Audit access: Regularly check who has access to what features
Related Topics
- Workflows - Approval workflows and processes
- Change Logs - Audit trail of changes