Adding new users in our production ecosystem
Availabe user roles include:
Customer role
Creating a new user from the Wordpress backend always registers them as a regular customer. These users do not have any access to the backend but can regularly access the shop front end as well as complete purchases and edit their individual user account details.
Shop manager role
One level above the customer in our specific eco system is the shop manager. These are simmilar to mini admin roles that have limited but required access to the shops backend. The access is limited to the required day to day maintenance, content distibution and some plugin settings like SEO redirections, elemetor and cache related options.
To give a user shop manager access level either an admin account access to the backend or an ssh login is required. This login can be found in our shared password library under the “Production SSH Access” information (see login-command for further details).
Admin role
The admin role has unrestricted access to the backend and server infrastructure. During regular production there shouldn’t be any user registered as admin.
If by accident you find an admin listed under users/benutzer via your backend login please inform your security advisor immediately. This would mean someone either forgot to properly close their admin session or there was a successful attack on our system that hasn’t been discorvered or fully cleared!