Roles and Privileges – Customers (User)

The following table describes the roles and privileges of the Customers (User) microservice:

Role Name	Privilege Group /Privilege	Description
ROLE_CUSTOMER_ADMIN	user/admin/all	Ability to navigate to the landing page of the Customers Admin console and perform all operations based on the given privileges as in the privilege group user/admin/all.
	customer/view/storeops	Ability to view the storeops page.
ROLE_CSR_ADMIN	customer/view/storeops	Ability to view the storeops page.
	user/csradmin/all	Ability to navigate to the landing page of the Customers Admin console and perform all operations based on the given privileges as in the privilege group user/csradmin/all.
ROLE_GUEST	user/guest/all	Ability to perform all operations based on the given privileges as in the privilege group user/guest/all.
ROLE_REG_USER	user/reguser/all	Ability to perform all operations based on the given privileges as in the privilege group user/reguser/all.
ROLE_CSR_ASSOCIATE	customer/view/storeops	Ability to view the storeops page.
	user/csrassociate/all	Ability to navigate to the landing page of the Customers Admin console and perform all operations based on the given privileges as in the privilege group user/csrassociate/all.
ROLE_STORE_OPERATOR	customer/view/storeops	Ability to view the storeops page.
	user/csradmin/all	Ability to navigate to the landing page of the Customers Admin console and perform all operations based on the given privileges as in the privilege group user/csradmin/all.
ROLE_ACCOUNT_ADMIN	user/admin/all	Ability to navigate to the landing page of the Customers Admin console and perform all operations based on the given privileges as in the privilege group user/admin/all.
ROLE_ACCOUNT_BUYER_ADMIN	user/viewall/getallusers	Ability to view all users and their details.
ROLE_ACCOUNT_REP	user/admin/all	Ability to navigate to the landing page of the Customers Admin console and perform all operations based on the given privileges as in the privilege group user/admin/all.
ROLE_CATALOG_ADMIN	user/viewall/getallusers	Ability to view all users and their details.
ROLE_CATALOG_EDITOR	user/viewall/getallusers	Ability to view all users and their details.
ROLE_LOYALTY_ADMIN	user/viewall/getallusers	Ability to view all users and their details.
ROLE_MERCHANDISE_ADMIN	user/viewall/getallusers	Ability to view all users and their details.
ROLE_MERCHANDISE_EDITOR	user/viewall/getallusers	Ability to view all users and their details.
ROLE_ORDER_ADMIN	user/view/collectionproperties	Ability to view a collection attribute.
	user/view/collections	Ability to view a collection.
	user/viewall/getallusers	Ability to view all users and their details.
	user/view/getuser	Ability to view a user.
ROLE_PRICE_ADMIN	user/viewall/getallusers	Ability to view all users and their details.
ROLE_PRICE_EDITOR	user/viewall/getallusers	Ability to view all users and their details.
ROLE_PROMOTION_ADMIN	user/viewall/getallusers	Ability to view all users and their details.
ROLE_PROMOTION_EDITOR	user/viewall/getallusers	Ability to view all users and their details.

The following table describes the privilege group and privileges of the Customers (User) microservice:

Privilege Group	Privilege	Description
user/admin/all	user/viewall/collections	Ability to view all the collections.
	user/create/collections	Ability to create a collection.
	user/view/collections	Ability to view a collection.
	user/update/collections	Ability to update a collection.
	user/viewall/collectionattributes	Ability to view all the collection attributes.
	user/view/collectionproperties	Ability to view a collection attribute.
	user/update/collectionproperties	Ability to update a collection attribute.
	user/create/consent	Ability to create a consent.
	user/viewall/consent	Ability to view all the consents.
	user/view/consent	Ability to view a consent.
	user/delete/consent	Ability to delete a consent.
	user/update/consent	Ability to update a consent.
	user/viewall/getallusers	Ability to view all users and their details.
	user/viewall/publicprofile	Ability to view public profiles of all users.
	user/view/getuser	Ability to view a user.
	user/delete/deativateuser	Ability to delete a user's account.
	user/update/updateusers	Ability to update a user.
	user/viewall/address	Ability to view all the addresses.
	user/create/address	Ability to create an address.
	user/view/address	Ability to view an address.
	user/delete/address	Ability to delete an address.
	user/update/address	Ability to update an address.
	user/create/sendnotification	Ability to send a notification via email or SMS.
	user/update/validatenotification	Ability to validate user's notification request details.
	user/update/password	Ability to update a user's password.
	user/view/securityquestions	Ability to view security questions.
	user/update/securityquestions	Ability to update security questions.
	user/view/identities	Ability to view a user's identity.
	user/viewall/customproperties	Ability to view all the custom properties.
	user/update/customproperties	Ability to update a user's custom properties.
	user/view/customproperties	Ability to view a user's custom properties.
	user/delete/customproperties	Ability to delete a user's custom properties.
	user/create/notes	Ability to create a note of a user.
	user/viewall/notes	Ability to view all the notes for a user.
	user/delete/notes	Ability to delete a note of a user.
	user/view/userconsents	Ability to view a consent of a user.
	user/viewall/userconsents	Ability to view all the consents of a user.
	user/delete/userconsents	Ability to delete a consent of a user.
	user/viewall/consenthistory	Ability to view all the consent history.
user/csrassociate/all	user/viewall/address	Ability to view all the addresses.
	user/view/collectionproperties	Ability to view a collection attribute.
	user/view/collections	Ability to view a collection.
	user/viewall/getallusers	Ability to view all users and their details.
	user/update/address	Ability to update an address.
	user/delete/address	Ability to delete an address.
	user/view/getuser	Ability to view a user.
	user/delete/deativateuser	Ability to delete a user's account.
	user/update/updateusers	Ability to update a user.
	user/view/address	Ability to view an address.
	user/create/address	Ability to create an address.
	user/create/notes	Ability to create a note for a user.
	user/viewall/notes	Ability to view all the notes for a user.
user/csradmin/all	user/viewall/address	Ability to view all the addresses.
	user/view/collectionproperties	Ability to view a collection attribute.
	user/view/collections	Ability to view a collection.
	user/viewall/getallusers	Ability to view all users and their details.
	user/update/address	Ability to update an address.
	user/delete/address	Ability to delete an address.
	user/view/getuser	Ability to view a user.
	user/delete/deativateuser	Ability to delete a user's account.
	user/update/updateusers	Ability to update a user.
	user/view/address	Ability to view an address.
	user/create/address	Ability to create an address.
	user/create/notes	Ability to create a note for a user.
	user/viewall/notes	Ability to view all the notes for a user.
user/guest/all	user/view/getuser	Ability to view a user.
	user/viewall/getallusers	Ability to view all users and their details.
	user/view/consent	Ability to view a consent.
	user/viewall/consenthistory	Ability to view all the consent history.
	user/viewall/consent	Ability to view all the consents.
	user/viewall/publicprofile	Ability to view public profiles of all users.
user/reguser/all	user/create/consent	Ability to create a consent.
	user/viewall/consent	Ability to view all the consents.
	user/view/consent	Ability to view a consent.
	user/delete/consent	Ability to delete a consent.
	user/update/consent	Ability to update a consent.
	user/viewall/getallusers	Ability to view all the users.
	user/viewall/publicprofile	Ability to view public profiles of all users.
	user/view/getuser	Ability to view a user.
	user/delete/deativateuser	Ability to delete a user's account.
	user/update/updateusers	Ability to update a user.
	user/viewall/address	Ability to view all the addresses.
	user/create/address	Ability to create an address.
	user/view/address	Ability to view an address.
	user/delete/address	Ability to delete an address.
	user/update/address	Ability to update an address.
	user/create/sendnotification	Ability to send a notification via email or SMS.
	user/update/validatenotification	Ability to validate user's notification request details.
	user/update/password	Ability to update a user's password.
	user/view/securityquestions	Ability to view security questions.
	user/update/securityquestions	Ability to update security questions.
	user/viewall/securityquestions	Ability to view the security questions.
	user/post/validatesecurityquestions	Ability to validate the security questions.
	user/view/identities	Ability to view a user's identity.
	user/viewall/customproperties	Ability to view all the custom properties.
	user/update/customproperties	Ability to update a user's custom properties.
	user/view/customproperties	Ability to view a user's custom properties.
	user/delete/customproperties	Ability to delete a user's custom properties.
	user/create/notes	Ability to create a note for a user.
	user/viewall/notes	Ability to view all the notes for a user.
	user/delete/notes	Ability to delete a note of a user.
	user/view/userconsents	Ability to view a consent of a user.
	user/viewall/userconsents	Ability to view all the consents of a user.
	user/delete/userconsents	Ability to delete a consent of a user.
	user/viewall/userconsentshistory	Ability to view all the consent history.
	user/create/userconsents	Ability to create a consent.
	user/create/validatesecurityquestions	Ability to create the security questions.

Revision History
2023-01-17 | AN – Updated content for 8.13 release.
2020-01-03 | AM – Updated content for February 2020 release.
2019-10-31  | AM – Updated content for November 2019 release.
2019-09-30 | AM – Content uploaded.