User Roles & Access Control
Okommerce supports nine distinct role types, and which ones exist in a given deployment depends on what the developer activates.
What account types/roles does the platform support?
Okommerce supports nine distinct role types, and which ones exist in a given deployment depends on what the developer activates.
What can the Developer role do that others cannot?
The Developer is the top-level technical owner of the deployment.
What are the responsibilities of the Central Admin?
The Central Admin is the operational owner of the store.
What does a Country Manager see and manage?
A Country Manager is scoped to a single assigned country.
What can a Vendor/Supplier do in their workspace?
A Vendor/Supplier operates a branch or shop within a multi-vendor deployment.
What does Fulfillment Staff do?
Fulfilment Staff perform the internal process that happens after an order is received and before it's ready for delivery, within a branch or warehouse.
What does an in-house Delivery Agent do via the delivery PWA?
An in-house Delivery Agent is a zone-assigned driver who works through the Delivery PWA (a progressive web app installed from a delivery URL).
How are external Delivery Companies represented as accounts?
External Delivery Companies are third-party logistics partners registered in the system.
What does a human Support Agent do?
A human Support Agent works alongside the AI agents.
What can a Customer do?
A Customer is the shopper.
How does the platform layout adapt to the logged-in role?
The entire platform layout — menus, screens, dashboards, and even which dashboard widgets are visible — is governed by the logged-in user's role and permissions.
How does the super admin create new roles?
Roles are fully definable.
How are permissions assigned to a role (module + action level)?
Permissions are assigned at module + action granularity.
What is the Super Admin role and why can't it be deleted?
The Super Admin is a seeded system role that holds all permissions across every module.
How are users scoped by country or vendor?
Individual user accounts can be scoped to a specific country or vendor.
How is a user enabled/disabled, and what happens to their access?
From the Users area, an admin can toggle a user active or inactive (and assign or change their roles).
How does role determine which dashboard widgets a user can see?
The dashboard is widget-based and dynamic, and which widgets a user can even see is determined by their role and permissions.