Admin Permissions (ACL)
Digital Product Passport declares its own ACL resources so passport management can be restricted without granting full admin rights.
Where to configure roles
In Magento Admin go to System > Permissions > User Roles and edit the role. The resources appear in the role resource tree under their Magento parents — configuration under Stores > Settings > Configuration, passport resources under Catalog.
Declared resources
| ACL resource | Admin label | Controls |
|---|---|---|
MageB2B_Dpp::config |
Digital Product Passport Configuration | Stores > Configuration > MageB2B > Digital Product Passport |
MageB2B_Dpp::passports |
Digital Product Passports | Parent resource for the catalog menu tree |
MageB2B_Dpp::passports_view |
View Passports | Catalog > Digital Product Passports grid and DPP Quality Report |
MageB2B_Dpp::passports_edit |
Edit Passports | Declared edit-level resource in the passports tree |
MageB2B_Dpp::templates |
Manage DPP Templates | Catalog > Digital Product Passports > Templates (list, create, edit, delete) |
Two practical notes:
- Passport records are written on the product form — editing a passport uses Magento's catalog product permissions, not a separate passport controller.
- Storefront pages, QR images, REST and GraphQL are anonymous public endpoints; no admin role applies to reading published passports.