Everything about who can log in to the admin lives under Team (left menu, under Extensions). A Super Admin creates logins here directly, with a starting password, and gives each person one or more roles. No invite email is needed.
The two Super Admins
admin@chiselestore.com and the Haloweave account hold the Super Admin role: every permission, including Team. Keep it to two or three people. Everyone else gets a narrower role.
Adding a team member
- Open Team and click Add member.
- Enter their name and work email. The email is their user-id.
- A strong starting password is generated. Copy it with the copy button, or type your own (at least 10 characters).
- Tick one or more roles. Start with the narrowest that covers their job.
- Click Add member. Send them the email and password privately (WhatsApp works; never a group chat). They log in at
admin.haloweave.store/appstraight away and can change the password under Settings → Profile.
Changing someone's roles or password
On the Members tab, the ⋯ menu on a row offers:
- Change roles: tick or untick roles. The change applies at that person's next login. If you change your own roles, log out and in again.
- Reset password: sets a new password immediately. Their old one stops working. Copy the new one before closing; it is not shown again.
- Remove: deletes their login. They cannot open the admin from that moment. Their past orders and edits stay in the history. You cannot remove your own login.
Roles
A role is a named set of permissions. The Roles tab lists them with a summary of what each can do and how many members hold it.
Click New role, pick a preset or tick the areas yourself, and save. Presets:
| Preset | Made for | Can | Cannot |
|---|---|---|---|
| Operations | Day-to-day order desk | Orders and fulfilment in full, stock, customers, vendor applications, Ops Assistant; view payments, promotions, homepage; edit partner stores | Refund money, change settings, manage the team |
| Catalogue | Content and product team | Products, prices, stock and homepage in full; edit promotions; view orders and vendor applications | Money, partners, settings, team |
| Finance | Refunds and settlements | Payments and refunds in full; edit partner payout details; view orders, customers, products, promotions | Change products, settings, team |
| Support (read-only) | Answering customers | View orders, payments, products, stock, customers, promotions, partners, vendor applications, homepage | Change anything |
The permission grid
Each row is an area of the admin; the columns are View, Create, Edit and Delete, plus All. View means the pages open and show data. Edit means changing records that already exist. Create and Delete are separate so a role can, for instance, edit products but never delete one. Ticking Edit, Create or Delete ticks View automatically.
| Area | Covers |
|---|---|
| Orders & fulfilment | Order list and detail, cancellations, returns, fulfilment records |
| Payments & refunds | Capturing and refunding payments |
| Products & prices | Catalogue, variants, categories, collections, prices, MRP |
| Stock | Inventory levels and locations |
| Customers | Accounts, addresses, groups |
| Promotions | Discount codes and campaigns |
| Homepage & reviews | Banners, flash sale, content rows, review moderation |
| Partner stores | Affiliates: approve, commission, theme, payout details |
| Vendor applications | Reviewing brands applying to sell |
| Ops Assistant | View = ask questions; Edit = apply drafts |
| Store settings | Regions, shipping, taxes, sales channels, API keys |
| Team & roles | This screen |
The Super Admin role cannot be edited or deleted, and only a Super Admin can give it to someone.
What a limited member sees
The left menu shows every page to everyone; the permissions apply when a page loads. A member without a permission sees an error on that page instead of data, and any button that needs a permission they lack fails with "Insufficient permissions". Give people the View permission for any area they need to glance at, even if they never edit it.
Good habits
- One login per person. Shared logins make the order history useless.
- Remove a login the day someone leaves.
- Review the Members tab monthly.
- Passwords: 10 characters minimum is enforced; the generated ones are 16 and random. Ask people to change the starting password once they are in.