Admin access policies are rules deciding which individual records a person in your dashboard can see or change. Where a role says what kind of thing someone may do, a policy says which specific accounts, orders or products that applies to, scoped to a brand, a region or a single customer.
| Included | What that means |
|---|---|
| Record-level rules | Scope by brand, region, channel, customer or a field on the record |
| Applies everywhere | Lists, detail screens, search and exports return only permitted rows |
| Layered on roles | Roles decide the action; the policy decides the records |
| Auditable | Policy decisions are recorded with the actor and the time |
Included in the Enterprise plan (from €60,000 a year). Enterprise is a contract with Vendure's engineers attached; it starts with a conversation at vendure.io/enterprise. See every capability, plan by plan.
Architecture reviews, custom plugin work, migrations, ongoing support. Get a hand from the team that builds Vendure.
Talk to the team