Page layouts, profiles and permissions sets
On this page
Use this topic to work out which StoreConnect permission sets and page layouts your users need, and how to give them the access to go with them.
StoreConnect follows the same visibility rules as Salesforce, so you configure visibility and security exactly as you would for any Salesforce object or field. Grant users access to StoreConnect page layouts by editing Page Layout Assignments on each object. If you would rather not use the layouts that ship with StoreConnect, add StoreConnect fields and related lists to your existing layouts instead.
Getting a user working takes two things, and both are required:
- The fields are on a page layout, and that layout is assigned to the user’s profile.
- The user has permission to view and edit those fields, through their profile or through an assigned permission set.
Permission sets that ship with StoreConnect
Use these as they are, or clone and modify them.
| Permission set | What it gives access to |
|---|---|
| StoreConnect Content Manager | All CMS objects, such as Page, Article, and Content Block, plus the Membership object. |
| StoreConnect Theme Manager | The theme management system and theme objects (Theme, Theme Asset, Theme Template, Theme Variable, Theme Locale), locale translations, the Store object, and the StoreConnect Console and theme importer. |
| StoreConnect Order Manager | Objects such as Payment, Shipment, Discount, and Stock Transfer, plus read access to many related objects. |
| StoreConnect Administrator | Everything above, plus all StoreConnect configuration objects, including the fields and objects related to Product2. |
| StoreConnect Sync User | Assigned only to the user StoreConnect syncs with Salesforce as. Do not assign it to people. |
:::warning None of these packaged permission sets grant access to Salesforce standard objects such as Product2 and Order. That access comes from a separate set of companion permission sets, described below. Assigning only the permission sets above leaves users without access to their own products and orders. :::
Standard object access and the post-install script
Salesforce does not let a managed package include standard object permissions such as Account, Contact, Order, and Product2 in its packaged permission sets. To give StoreConnect the access it needs to those objects and fields, a post-install script runs automatically whenever the package is installed or upgraded. You do not need to run it yourself, and there is no way to trigger it manually.
The script creates and maintains a companion “Standard Permission” permission set for each main permission set. Assign each companion alongside its matching main permission set, so the two work together.
| Companion permission set | Assign alongside | Standard objects it grants access to |
|---|---|---|
| StoreConnect Administrator Standard Permission | StoreConnect Administrator | Account, Asset, Campaign, Contact, Lead, Order, Pricebook2, Product2 |
| StoreConnect Order Manager Standard Permission | StoreConnect Order Manager | Account, Asset, Contact, Lead, Order, Pricebook2, Product2 |
| StoreConnect Content Manager Standard Permission | StoreConnect Content Manager | None. It exists for completeness; the Content Manager works on StoreConnect CMS objects and needs no standard object access. |
| StoreConnect Sync Standard Permission | StoreConnect Sync User (the sync user only) | Account, Asset, Campaign, Contact, Lead, Order, Pricebook2, Product2, PushTopic |
Things to be aware of:
- The script runs asynchronously after install or upgrade, so the companion permission sets can take a moment to appear or refresh. If they are not there immediately after a fresh install, wait a short while and check again.
- On upgrades the script re-applies the permissions, so any new standard object or field access a newer version needs is added for you.
- Assign the companion set to the same users who hold the matching main permission set. You can skip this only if those users already have the required standard object access through their profile or another permission set.
Confirm a user has the access they need
- Open the User record and check that both the main permission set and its companion Standard Permission set appear under Permission Set Assignments.
- Ask the user to open a Product and an Order record and confirm they can see and edit the StoreConnect fields they need.
- If fields are missing, check the Page Layout Assignments on that object for the user’s profile. If the record itself is inaccessible, the companion permission set is the more likely cause.
Salesforce training on layouts, profiles, and permissions
| Module | What it covers |
|---|---|
| Customize record page components and fields | Creating and managing page layouts, using the page layout editor, assigning a layout to a profile, and how the editor drives record detail content in Lightning Experience. |
| Control access to objects | Viewing and creating profiles, modifying object access with profiles, viewing assigned users, and creating and assigning permission sets. |
| Control access to fields | Viewing and editing field-level security settings. |
Was this article helpful?
Thanks for your feedback! It helps us improve our docs.