SettingsUpdated 2026-06-01
Staff & teams
Invite team members with roles and scoped permissions, enforced by plan limits.
Invite teammates to help run your store. Assign roles and scoped permissions — staff only see and manage what you allow.
Where to find it
Settings → Staff (owner-only in the sidebar). The page lists active staff, pending invitations, and your plan's seat usage.
Roles
| Field | Type | Description |
|---|---|---|
| Owner | role | The shop creator. Has all permissions and cannot be removed. Bypasses permission checks. |
| ADMIN | role | Full access to all admin sections. Equivalent to owner for permissions. |
| MANAGER | role | Configurable permissions. Default to a broad set. |
| STAFF | role | Configurable permissions. Grant only what's needed. |
Permissions
For MANAGER and STAFF roles, toggle individual permissions. The sidebar only shows sections a staff member can access:
- manage_orders — view and manage orders
- manage_products — manage the catalog
- manage_customers — view and manage customers
- view_analytics — access the analytics dashboard
- manage_marketing — manage campaigns and automations
- manage_discounts — create and edit coupons
- manage_storefront — edit themes and pages
Invitations
Invite by email with a role and permissions. Invitations expire after 7 days. The invitee receives a link to an accept page where they confirm (their email must match). Resend or cancel pending invitations anytime.
Plan seat limits
Starter allows 0 staff, Growth allows 5, Advanced allows 15, Enterprise is unlimited. The staff page shows your limit, used, and remaining seats. Over-limit invitations are blocked.
Staff endpoints
GET
/staff/List staff + pending invitations + plan usage.
SessionPOST
/staff/inviteInvite a staff member by email (role + permissions).
SessionPOST
/staff/invitations/:token/acceptAccept an invitation (email must match).
SessionPATCH
/staff/:idUpdate a staff member's role/permissions.
SessionDELETE
/staff/:idRemove a staff member.
SessionGET
/staff/permissions/meCurrent user's role + permissions for the active shop.
Session