Users, Roles and Invites
Access to your account and spaces is controlled by three building blocks: users (who can log in), roles (what they are allowed to do) and invites (how you grant others access). This page explains how to set up each of them.
Users
We distinguish between application users and human users. Application users access the application through the web service interface (REST API) — this is useful for internal or external developers integrating or testing specific functionalities. Human users are real individuals who access the application via a browser — ideal for store owners, CFOs or members of the merchant's operational team.
Create human users
To create a human user, go to Account > Users > Users. Once the user is created, they receive an email with an activation link at the specified email address. The user must click the link and set their personal password.
Create application users
To create an application user, go to Account > Users > Application Users or open the application user list. After you create an application user, you are presented with the Application User Key (BASE64). This key is used for authentication against our web service API — see also the Application User page in the Developer Tools section.
The Application User Key is only presented once and cannot be changed. However, a new key can be generated at any time: click the Manage Authentication Key icon to generate a new authentication key, for example if you lost the old one or want to replace it. Different key versions can be used at the same time, so you can migrate your systems first and deactivate the old key once the migration is finished.
Roles
To set up roles, go to Account > Users > Roles or open the role list. When creating a role, note that permissions are context-specific: while you can see all available permissions, some apply only to an account or sub-account context, while others are valid solely within a space.
Pre-defined portal roles carry a description that explains their purpose and permissions. The description is shown in the role drop-down when assigning a role and on the role detail page — so you do not need to assign a role first to find out what it does.
Assign roles to users
Once a role is created, you can assign it to users. Open the human user list or the application user list, select the user you wish to edit, and click the Manage link in the Roles section to update the user's roles. You can assign roles in different contexts — as mentioned above, some permissions are effective only in a specific context, such as a space or an account.
Role behaviour
When you assign multiple roles to a user, the permissions from each role are inherited and combined. The user therefore gains the cumulative permissions of all assigned roles.
Invites
Invites are a useful tool for granting access to your account or a specific space — for example to let a web developer assist with the setup.
You can only invite existing users. If you are not sure whether the person you want to invite already has a user, simply create a new user — our system will indicate if a user with this email address already exists.
Example: Invites enable you to grant your web developer access to your templates and resources for a specific account, allowing her to access different spaces with her own user profile.
Space invite
To create a space invite, go to Space > Invites or open the [space invite list](https://PostFinance Checkout/space/select?target=/space-invite/list). Provide the email address and assign a role, ensuring it has the appropriate permissions for modifying settings. After saving, the invitee receives an email with a link to accept the invitation, allowing them to create a new account or log in with an existing one.
Account invite
To create an account invite, go to Account > Invites or open the account invite list. When creating the invitation, specify the email address and the intended role, ensuring it has the necessary permissions for modifying settings. Once saved, the invitee receives an email with a link to accept the invitation, allowing them to either create a new user account or log in with an existing one.