Admin Permissions (ACL)
Payment Profile adds four ACL resources so you can give sales or support users access without full admin rights.
Where to configure roles
In Magento Admin go to System > Permissions > User Roles and create or edit a role. The permissions appear under Payment Profile in the role resource tree.
What maps to what
| Admin area | Required ACL |
|---|---|
Customers > Payment Profiles menu and profile grid |
MageB2B_PaymentProfile::paymentprofiles |
| Create, edit and save a profile | MageB2B_PaymentProfile::save |
| Delete one or many profiles | MageB2B_PaymentProfile::delete |
Stores > Configuration > MageB2B > Payment Profile |
MageB2B_PaymentProfile::config |
Notes on the save permission
::save also covers the form's AJAX helpers: the customer picker grid and the website-dependent payment-method reload. A role without ::save can open the grid but cannot open the editor — the method list would also fail to refresh. Grant ::save together with ::paymentprofiles for anyone maintaining profiles.
Notes on the delete permission
::delete covers both the single-profile Delete action and the grid mass delete. The mass action is enforced server-side since version 1.0.10 — hiding the button in a custom theme is not a substitute for the ACL.
Suggested role split
| Role | Resources |
|---|---|
| Read-only reviewer | paymentprofiles |
| Profile maintainer | paymentprofiles + save (+ delete only if cleanup is part of the job) |
| Store administrator | All four, plus the config resource |