Skip to main content
All CollectionsProduct Manager (PIM)Administration
Product Manager: Overview of User Security
Product Manager: Overview of User Security
Katie Pilcher avatar
Written by Katie Pilcher
Updated over 2 years ago

Product: Product Manager

Permissions control access to Product Manager and functions within the application. Each customer implements a security model that works for them. Below are settings specific to the Product Manager application. For information about overall Foundry platform settings, click here.

Permissions

Settings > Security > Users and Roles > Users > Choose a User > Authorizations > Unified Commerce > Permissions

Activity Status

We have a default set of product activity statuses that are configured for our customers but you can define your own. For every product activity status that gets added or removed in Product Manager, they get added or removed dynamically in the Product Manager permissions screen. For a given user or role, you can control who has access to products with certain activity statuses and what they can do with those products.

John isn’t allowed to see anything with a Discontinued status. John can see the products in that status, but he can’t edit them. The permission for that status has been marked as ‘deny’.

John’s boss Mary is allowed to see records with a Discontinued status so she can not only see them but she can edit them.

Data Purge Manager

Indicates if this user/role can purge data.

Product Manager

Override Product Edit Restrictions - The user can modify a product activity status on a record which they're not allowed to edit.

Set min/max inventory quantities - On the item edit page there are controls for Min/Max quantities. There is no logic behind it but edit is allowed only to users with this permission.

When enabled, the user can change Not Manually Product statuses - If a product is in the Workflow or External System stages of a lifecycle, the user can manually progress it as it would do workflow or external system.


Identity Claims

Settings > Users and Roles > Users > Choose a User > Identity Claims > Unified Commerce Hub

Inventory

Allow transfer between owners

The user can change the owner on the inventory transfer page.

Facility

Facility (Facility should reference facility name) - When this ID claim is applied to a user, the following should occur:

  • Order page(s) - For orders where inventory has already been allocated, only display orders where inventory solely belonging to facility the user has access to. Also, do not allow the user to allocate inventory to facilities they do not have access to

  • Inventory page(s) - Only display products and inventory for products/items belonging to facilities the user has access to

  • Product page(s) - Only display products associated to the facilities user has access to.

    In the event a product is not associated to any facilities AND facility ID claim is in use, do not display those products.

Owner

Owner - When this ID claim is applied to a user, the following should occur:

  • Order page(s) - For orders where inventory has already been allocated, only display orders where inventory solely belonging to owner the user has access to. Also do not allow the user to allocate inventory to owners they do not have access to

  • Inventory page(s) - Only display products and inventory for products/items belonging to owners the user has access to

OMS

Customer

Customer- When this ID claim is applied to a user, the following should occur:

  • Order page(s) - Only display orders for customers the user has access to. Also, do not allow the user create orders for customers they do not have access to

  • Customer page(s) - Only display customer records for the customers the user has access to

Customer Group

Customer Group - When this ID claim is applied to a user, the following should occur:

  • Order page(s) - Only display orders for customers belonging to Customer Groups the user has access to. Also do not allow the user create orders for customers belonging to Customer Groups they do not have access to

  • Customer page(s) - Only display customer records belonging to customer groups the user has access to

PIM

Attributes Edit

To give you more control over the content that users can view and/or edit, you can use Identity Claims to specify which Attribute Groups a certain user or role can edit in Product Manager.

Attributes View

Allows you to specify which Attribute Groups a certain user or role can view in Product Manager.

Brand

Brand - When this ID claim is applied to a user, the following should occur:

Product page(s) - only display products belonging to brands the user has access to

  • Order page(s) - Only display orders for products solely belonging to brands the user has access to. Also, do not allow the user to add items to the order for brands they do NOT have access to

  • Inventory page(s) - Only display products and inventory for products/items belonging to brands the user has access to

You can type multiple brands in this field provided the brands have been created previously.

For some customers, they might have 8-10 people who work in Product Manager. They have different brands. Jason can only see ABC brand. Someone else is responsible for a different brand.

Catalog

Catalog - When this ID claim is applied to a user, the following should occur:

  • Product page(s) - Only display products belonging to catalogs the user has access to

    In the event a product does not belong to a catalog AND the catalog ID claim is in use, do not display those products

  • Order page(s) - Only display orders for products solely belonging to catalogs the user has access to. Also, do not allow the user to add items to the order for catalogs they do NOT have access to

  • Inventory page(s) - Only display products and inventory for products/items belonging to catalogs the user has access to

Channel

Channel - When this ID claim is applied to a user, the following should occur:

  • Product page(s) - Only display products belonging to channels the user has access to

    In the event a product does not belong to a channel AND the channel ID claim is in use, do not display those products

  • Order page(s) - Only display orders for products solely belonging to channel the user has access to. Also, do not allow the user to add items to the order for channels they do NOT have access to

  • Inventory page(s) - Only display products and inventory for products/items belonging to channels the user has access to

You might have someone internally who is a Shopify expert. Another person is Target+ expert. You can split out the products this way. If I have a product that's going to both, then both people would see that product.

Product

Product - When this ID claim is applied to a user, the following should occur:

  • Order page(s) - Only display orders for products solely comprised of products the user has access to. Also, do not allow the user to add items to the order they do NOT have access to

  • Inventory page(s) - Only display products and inventory for products/items the user has access to

Supplier

Supplier - When this ID claim is applied to a user, the following should occur:

  • Product page(s) - Only display products belonging to suppliers the user has access to

    In the event a product does not belong to a supplier AND the supplier ID claim is in use, do not display those products

  • Order page(s) - Only display orders for products solely belonging to suppliers the user has access to. Also do not allow the user to add items to the order for suppliers they do NOT have access to

  • Inventory page(s) - Only display products and inventory for products/items belonging to suppliers the user has access to

Some customers are big retailers who want external parties to log in and combine the data so they can manage the data. The external parties can only manage their products and can't see other products. In this case, you would have roles for each external company and they would be limited by Supplier.

rev: 4/11/22

Did this answer your question?