Team roles and permissions for your store

The day you stop running the store alone, access becomes a real decision. The lazy answer is to hand everyone the owner login. Then five people can issue refunds and export every customer's phone number, when only one of them ever should. Storix takes a different route: five built-in roles, and only the owner hands them out.

This page walks through the five roles, what each one can touch, and how to invite a person without handing over the keys to your whole store. Setting it up takes about ten minutes, and it saves you from the refund nobody can explain later.

Five built-in roles, and no custom ones

Owner, Operations lead, Commerce manager, Supervisor and Support. When you invite someone you pick one of the last four — Owner is not on the list.

You cannot build your own role. Access & Security → Roles & permissions lists every permission key, but it is read-only: "You cannot create or edit roles here." Custom roles live in the Storix operator console, so ask support if you genuinely need one.

What each role opens

A ladder: each step down takes more away.

• Owner — everything, including team management, the consent audit and erasure requests. Those three are owner-only.
• Operations lead — everything except Manage team, View consent audit and Review erasure requests.
• Commerce manager — like Operations lead, minus Store settings, View subscription, View wallet, Request top-up, Manage domain, Manage translations, Manage transfers and Export data.
• Supervisor — like Commerce manager, minus most marketing tools, payment and shipping setup, finance, Edit tax settings, Manage public API webhooks, View audit log and Manage COD collection.
• Support — like Supervisor, minus View analytics, Storefront theme, Manage pages, Manage warehouses and Manage pricing.

Unsure about a permission? Type in Search permissions. Each tile explains its key in one sentence.

Only the owner can invite

Only the owner can send, resend or revoke an invitation, or change a role. Only Owner holds Manage team, so you cannot delegate hiring to your Operations lead. Other managers do not even see the Role field, and sending fails for them.

1. Open Access & Security → Managers. Next to Invite member you see your manager count and plan limit.
2. Click Invite member, type their Email, click Next. Choose a Role and read Permissions included with this role.
3. Check the Summary and click Send invite. They set their own password.

The link works for 7 days. Resend sends a new 7-day link and kills the old one. You cannot invite someone whose account belongs to another store, and a Pending invitation blocks a second invite to the same email.

Your plan sets the number of seats

Your plan decides how many managers you can have, and the owner is not counted. Pending invitations take seats too. At the limit, Invite member greys out and a banner says "You have reached the manager limit for your subscription." The count beside the button only shows if your role also has View subscription. Free a seat by revoking a pending invitation or deleting a manager.

Close the door on the last day

1. On Access & Security → Managers, click Delete on their row and confirm "Delete this manager? They will lose access immediately."
2. You cannot delete the owner, yourself, or the only manager. If you are handing the store over, plan the order with Storix support first.
3. Change any password or courier, payment or marketing credential that person knew. Removing a login does not change a shared secret.
4. The Audit log that will record team changes — Added team member, Updated team member, Removed team member, invites sent and revoked — is coming soon during the pilot. Until it ships, the Team page is your record: who is listed, with which role, and which invites are still pending.

Both the Audit log and the Activity log are coming soon during the pilot. When they ship, know their blind spots: price edits are not recorded, and return, payment and gift card rows show the actor as Anonymous. Until then, the order timeline shows who confirmed and shipped each order, and the managers list shows who holds which keys.

Read your Managers list every quarter, and before a peak like Ramadan. Ask of each person: do they still do this job, and still need this role? Revoke pending invitations nobody accepted — they still hold a seat.

Your plan decides how many team members you can invite, and the owner does not count — compare plans or create your store.

This lesson is general guidance, not legal or accounting advice.

Related lessons

• Account security and two-factor authentication
• Incident response runbook
• VAT and ETA e-invoice basics