Users

InStore Center requires at least one administrator. The first administrator is set up when you receive your environment from commercetools. This user can add and authorize additional administrators for one or more environments.

We recommend that you authorize at least two administrators per environment. Only another authorized administrator can deactivate an administrator or reset their password, so a single administrator cannot recover their own access.

Add an administrator

1. In the InStore Center, select Admin User.
2. Review the list of administrators. To view or update details, select Edit for an administrator.
3. Select Add Admin User.
4. In the User Information pane, enter the following details:
   • Full Name: first and last name of the administrator.
   • Display Name: name shown in InStore Center. Can be a nickname.
   • Email Address: unique, valid email address not used by other users. The invitation is sent to this address.
     The email address for each user must be globally unique.

   • Phone Number: (optional) valid phone number.
   • Preferred Language: select from supported locales.
   • Default Environment: complete this using the Environments pane below.
5. In the Environments pane, select the Edit icon in the Actions column for the environment. You can only select environments you are authorized to manage.
6. Assign at least one role to the administrator and select Save.
7. In the upper pane, select Save Changes.

Authorize an administrator for additional environments

1. In the InStore Center, select Admin User.
2. Click the Edit icon in the Actions column for the administrator.
3. In the Environments pane, click the Edit icon in the Actions column for the environment.
4. Assign roles for the environment. By default, administrators are added with the Unauthorized role.
5. Click Save to exit the environment dialog.
6. In the upper pane, click Save Changes.

Set a default environment for an administrator

1. In the InStore Center, select Admin User.
2. Click the Edit icon in the Actions column for the administrator.
3. In the Environments pane, click the Edit icon in the Actions column for the environment.
4. Select the Default checkbox for the environment. This environment is the default when the administrator signs in to InStore Center. If this administrator also performs tasks in the InStore API, their scope is limited to the default environment.
5. Click Save to exit the environment dialog.
6. In the upper pane, click Save Changes.

Deactivate an administrator

Deactivate an administrator when they no longer need access to InStore Center, for example when they leave the retailer. InStore Center does not use your identity provider for administrator sign-in, so removing someone from your single sign-on (SSO) scheme does not revoke their InStore Center access. Until you deactivate them, they can still sign in and change store configuration.

1. In the InStore Center, select Admin User.
2. Click the Edit icon in the Actions column for the administrator.
3. Click Deactivate User.
4. In the upper pane, click Save Changes.

The administrator can no longer sign in to InStore Center. Their record remains in the list of administrators, so you can invite them again later.

Reset an administrator's password

InStore Center does not have a direct password reset action. To reset a password, deactivate the administrator and then invite them again. This restarts their registration and sends a new invitation email, which lets them set a new password. Any other authorized administrator can do this.

1. In the InStore Center, select Admin User.
2. Click the Edit icon in the Actions column for the administrator.
3. Click Deactivate User.
4. In the upper pane, click Save Changes.
5. Click the Edit icon in the Actions column for the same administrator.
6. Click Invite User.
7. In the upper pane, click Save Changes.

Administrator password requirements

Administrators must set a personal password after receiving the invitation email. Passwords must meet the following requirements:

• Minimum 8 characters

• At least one number

• At least one uppercase letter

• At least one lowercase letter

• At least one of the following symbols:

  !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~)