Admin Permissions (ACL)

B2B Quote adds granular admin permissions so you can give sales/support users access without full admin rights.

Where To Configure Roles

In Magento Admin go to:

  • System >Permissions > User Roles (create/edit a role)
  • System >Extensions > Integrations (if you use integration tokens)

The permissions below show up under B2B Quotes in the role resource tree.

Admin Menu (What Maps To What)

Admin MenuRequired ACL
B2B Quotes >Analytics DashboardMageB2B_B2BQuote::dashboard (granular: dashboard_view, dashboard_export)
B2B Quotes >QuotesMageB2B_B2BQuote::quotes_manage (often combined with quotes_view/quotes_save)
B2B Quotes >ProjectsMageB2B_B2BQuote::projects
B2B Quotes >Quote StatusesMageB2B_B2BQuote::statuses
B2B Quotes >Status TransitionsMageB2B_B2BQuote::transitions
B2B Quotes >Quote CategoriesMageB2B_B2BQuote::categories
B2B Quotes >Quote TagsMageB2B_B2BQuote::tags
B2B Quotes >Quote FeesMageB2B_B2BQuote::quote_fees
B2B Quotes >Pricing RulesMageB2B_B2BQuote::rules_pricing
B2B Quotes >Workflow RulesMageB2B_B2BQuote::rules_workflow
B2B Quotes >ConfigurationMageB2B_B2BQuote::config

Main ACL Resources

PermissionWhat It Controls
MageB2B_B2BQuote::dashboard_viewView analytics dashboard
MageB2B_B2BQuote::dashboard_exportExport dashboard data
MageB2B_B2BQuote::quotes_manageAccess quote management UI
MageB2B_B2BQuote::quotes_viewView quotes
MageB2B_B2BQuote::quotes_saveSave/update quotes
MageB2B_B2BQuote::quotes_deleteDelete quotes
MageB2B_B2BQuote::messagesManage quote messages
MageB2B_B2BQuote::attachments_viewView/download attachments
MageB2B_B2BQuote::attachments_uploadUpload attachments
MageB2B_B2BQuote::attachments_deleteDelete attachments
MageB2B_B2BQuote::quotes_mergeMerge quotes
MageB2B_B2BQuote::quotes_splitSplit quotes
MageB2B_B2BQuote::projectsProjects
MageB2B_B2BQuote::statusesStatuses
MageB2B_B2BQuote::transitionsStatus transitions
MageB2B_B2BQuote::categoriesCategories
MageB2B_B2BQuote::tagsTags
MageB2B_B2BQuote::quote_feesQuote fees
MageB2B_B2BQuote::rules_pricingPricing rules
MageB2B_B2BQuote::rules_workflowWorkflow rules
MageB2B_B2BQuote::configSystem configuration section

Tip: Align ACL With REST API Access

If you use the REST API Add-On (package mageb2b/b2b-quote-api), admin/integration endpoints are protected by the same ACL resources. Keep your integration user’s permissions minimal:

  • Prefer MageB2B_B2BQuote::quotes_view for read-only integrations
  • Add MageB2B_B2BQuote::quotes_save only when the integration needs to update quotes

See:

Found an issue with this documentation? Let us know