On this page
  1. Where To Configure Roles
  2. Admin Menu (What Maps To What)
  3. Main ACL Resources
  4. Tip: Align ACL With REST API Access

Admin Permissions (ACL)

Customer Price adds granular admin permissions so you can give pricing or support users access without full admin rights.

Where To Configure Roles

In Magento Admin go to:

  • System > Permissions > User Roles (create/edit a role)
  • System > Extensions > Integrations (if you use integration tokens)

The permissions below show up under Pricesystem Customerprice All in the role resource tree.

Admin Menu (What Maps To What)

Admin Menu Required ACL
Pricesystem > Customerprice MageB2B_PricesystemCustomerprice::all
Pricesystem > Customerprice > All Customerprices MageB2B_PricesystemCustomerprice::manage

Main ACL Resources

Permission What It Controls
MageB2B_PricesystemCustomerprice::manage Customer price grid and record screens
MageB2B_PricesystemCustomerprice::save Create/update customer prices
MageB2B_PricesystemCustomerprice::delete Delete customer prices

The module declares no own config resource. Access to Stores > Configuration > MageB2B > Pricesystem is governed by the shared MageB2B_PricesystemCore::config resource.

Tip: Align ACL With REST API Access

If you use the REST API Add-On (package mageb2b/pricesystem-customerprice-api), the same resources protect its routes:

  • Read and search routes require manage
  • Create, update and bulk-save routes require save
  • Single, bulk and per-customer deletes require delete

Keep the integration user's permissions minimal. See REST API for installation and the endpoint reference.