Getting Started

Manage Shopware User Roles & Permissions

Not everyone on your team needs access to every part of your online store. For example, a content creator only needs access to products and categories, while an accountant only needs to see orders and invoices, and a support agent only needs access to customer profiles.

Roles vs. Administrators

It is important to understand the division of permissions in Shopware 6:

  • Administrators: Have absolute, hardcoded access to the entire administration panel. They bypass all security profiles. Even if a custom role restricts certain permissions, a user with the “Administrator” toggle turned on will still see and access everything.
  • Custom Roles: These are collections of permissions (e.g., viewing orders, editing products) that you define. You apply these roles to users who are not administrators. When they log in, they will only see the menu items and screens that their role explicitly permits.

Available Permissions

Below the role name, you will see a detailed grid representing different areas of the shop (e.g., Catalogues, Customers, Orders, Settings, Extensions). For each area, you can grant four levels of access permissions:

  • View (Read): Allows the user to open and read information (e.g., view a list of products or orders) but not make changes.
  • Edit (Write): Allows the user to modify existing records (e.g., change a product’s price or description).
  • Create: Allows the user to add new records (e.g., create a new product page or manual order).
  • Delete: Allows the user to permanently remove records (e.g., delete a product, category, or order).
Apply the Principle of Least Privilege
Assign users the minimum permissions necessary for their daily tasks. You can always edit their role to grant additional access later if needed.

Prerequisites

  • A Shopware user with administrative permissions on an active Nexcess Shopware hosting plan.

Step-by-Step Instructions

  1. Navigate to the Shopware Admin Panel, replacing yourstore.com or with the actual domain or temporary host assigned to your plan.
  2. Log in with an account that has administrative permissions. If you forgot your password, check our instructions on resetting your password.
  3. Navigate to Settings > System > Users & Permissions.

Define a Custom Role

To define a new permission role for your team members:

  1. Scroll down from the Users section to the Roles section on the Users & Permissions page.
  2. Click the Create role button to the right of the search box.
  3. Enter Name & Description: Give the role a descriptive title (e.g., Order Manager, Content Writer, Support Staff) and add a brief description of its purpose.

Assigning Roles to Users

Once you have created and saved a role, you must assign it to a user:

  1. Navigate back to the Users tab under Settings > System > Users & Permissions.
  2. Find the user you wish to edit and click the three dots menu (…) on the right side of their row, then select Edit.
  3. Ensure the Administrator toggle switch is turned OFF.
  4. Scroll down to the Roles section.
  5. Select one or more of the custom roles you created from the dropdown field.
  6. Click Save.

The next time that user logs in, their sidebar menu and dashboard interface will update to show only the sections allowed by their assigned role(s). If they attempt to access restricted pages directly, Shopware will block the action and display a permission denied notice.

Official Resources

If you cannot load the login page or receive an error, check the following common causes: