StoreFulfil governs access using three primary roles.
Roles
- Admin: Permitted to perform management actions and sensitive operations.
- Operator: Standard access for fulfilment tasks.
- Brand: Scoped explicitly to view only their own client data.
Understanding Users and Roles
The access levels available within StoreFulfil.
Reference
Updated Aug 2026
Owner: Operations Admin
Area: Settings
Before you begin
Make role and client scope understandable so each person can see which actions belong to them and when to ask an Admin.
Prerequisites
- The person’s intended role and client scope are known.
- The Admin can review the user record and client assignment.
- A role change is approved by the Operations Admin.
Stop and check
Do not share accounts or grant a role merely to make an action available.
Expected Outcome
Brand users are scoped correctly, and management actions are restricted to Admins.
Runbook evidence
Use these signals to decide whether the work is ready to continue, complete, or needs an owner.
State checkpoints
Warehouse Operator
The user performs assigned fulfilment work and hands admin-only cases over.
Next: Use the visible queue and order state without changing settings or connections.
Warehouse Admin
The user manages clients, connections, inventory, recovery, and user access.
Next: Perform sensitive actions only after reviewing the displayed result.
Brand User
The user sees only the permitted client scope and does not manage warehouse operations.
Next: Report an unexpected scope rather than attempting an administrative action.
Completion evidence
- The user sees only the intended role and client scope after the change.
Escalation evidence
- Record the user, intended role, client scope, and Admin decision without passwords.
Work safely
Who may take this action
Warehouse Admin
What you should see
The user performs assigned fulfilment work and hands admin-only cases over.
Safe next step
Use the visible queue and order state without changing settings or connections.
What not to do
Do not share accounts or grant a role merely to make an action available.
How to tell it is complete
The user sees only the intended role and client scope after the change.