Manage Shopware Users and Permissions

As your e-commerce store grows, you will likely need to add employees, developers, or agencies to your Shopware backend. Managing these accounts securely is essential. In this article, we will guide you through navigating the user administration panel, creating new users, and assigning them full administrator privileges.

Prerequisites

  • A Shopware user with administrative permissions on an active Nexcess Shopware hosting plan.

Step-by-Step Instructions

  1. In Shopware 6, all users and their respective access rights are managed centrally in the settings menu:
  2. Navigate to the Shopware Admin Panel, replacing yourstore.com or with the actual domain or temporary host assigned to your plan.
    1. If your domain is live: https://www.yourstore.com/admin
    2. If you are using a Nexcess temporary staging domain:  https://abc123.nxcli.net/admin
  3. Log in with an account that has administrative permissions. If you forgot your password, check our instructions on resetting your password.
  4. In the left sidebar, click on Settings.
  5. In the settings grid under the System section, click on Users & Permissions.
  6. By default, you will be on the Users tab, which displays a table listing all existing user accounts.

Create a New User

In Shopware 6, all users and their respective access rights are managed centrally in the settings menu:

  1. To add a new member to your Shopware administration team:
  2. From the Users & Permissions screen, click the Create new user button to the right of the search box in the Users section.
  3. Fill in the General Information form:
    • Username: A unique name the user will enter on the login screen (e.g., jdoe or their email).
    • First Name & Last Name: The actual name of the user.
    • Email Address: Ensure this is a valid, active email address. If they ever forget their password, the reset email will be sent here.
    • User Interface Language: Select the default language for their administration dashboard.
    • Password: Set an initial password for the user. They will be able to change this once they log in.
    • Timezone: Set the time zone for your user.
  4. Select an avatar image (optional) to personalize their profile icon.
  5. Under the Permissions section, decide whether this user should have full administrator privileges or restricted access.
  6. Click the Save button in the top right corner to create the user account.

Grant Full Administrator Access

On the user creation or edit screen, you will find an Administrator toggle switch.

  • When turned ON: The user is granted full, unrestricted access to every setting, catalog item, client order, payment gateway configuration, and code extension inside the Shopware Administration. They bypass all custom permission roles.
  • When turned OFF: The user will have no access to the backend until they are assigned to one or more custom roles (see Module 5).

User Management Best Practices

  • Avoid Shared Accounts: Never share a single login (e.g., having multiple employees share the default admin username). Shared accounts make auditing changes impossible and increase security risks.
  • Deactivate Inactive Users: If an employee leaves or an agency completes their contract, deactivate or delete their user account immediately.
  • Verify Email Addresses: Always confirm that the email address associated with each user is correct. This is the only self-service recovery channel they have if they forget their password.

Official Resources