Find your store

Add-on

Roles

Lets you create named roles (permission bundles) and assign one to each sub-admin account, replacing a fixed permissions checklist. The main Administrator account always has full access regardless. Deactivating drops every other admin to their Dashboard and profile until reactivated; nothing configured is deleted.

  • Version 1.2.20

Add-on

Buy and install it from Add-ons in your admin panel.

Buy now · $9.00 Choose a platform

Changelog

  1. Version 1.2.20 4 Nov 2026

    - On a hosted Cloud plan, adding a staff account or unbanning one is refused once the plan's staff limit is reached, with a message saying so. Existing accounts keep working, and self-hosted stores are unaffected. Needs kernel support for plan limits to take effect; on an older kernel nothing changes.
    - For developers: this plugin now tells the coming Clear test data tool what to do with each of its tables (empty it, keep it, or remove it only with customer accounts). Nothing changes for store owners yet.

  2. Version 1.2.19 30 Oct 2026

    - This add-on's admin pages show an 'Online docs' link next to the page name, opening the “Staff, roles and fraud” page of the online documentation in a new tab.

  3. Version 1.2.18 29 Oct 2026

    - Its database tables name their text collation, so they come out the same on every server.
    - Amharic (አማርኛ) translation, machine-translated (review welcome).
    - Oromo (Afaan Oromoo) translation, machine-translated (review welcome).

  4. Version 1.2.17 26 Oct 2026

    - Adds Thai (ไทย). Machine-translated; review welcome.
    - Japanese translation.

  5. Version 1.2.16 25 Oct 2026

    - The Roles list and role form no longer name permissions that belong to plugins that are switched off or not installed; they say the role keeps them, and those permissions still apply when the plugins are running.
    - Adds Polish (pl) text. Machine-translated.

  6. Version 1.2.15 23 Oct 2026

    - On a coins-only store, the role editor no longer mentions withdrawals in its permission warnings or its area search.

  7. Version 1.2.14 23 Oct 2026

    - Changing your own email or password on the Staff screen now asks for your current password, as My account already does.
    - Banning or unbanning a staff member now waits its turn behind staff saves, so it can no longer leave the store without an active Administrator.
    - The activity log for a staff account change now records what it was before and any name or email change, and notes when a password change signed them out everywhere.

  8. Version 1.2.13 19 Oct 2026

    - Staff: "Sign them out everywhere" (the button, a ban, and the box on a password change) now ends every session the account has open, not only its "Remember me" sign-ins, so a session still open elsewhere cannot outlast a password change.