Secure > Authorization > Customize default access control policies > Examples: Customizing access control policies using the Organization Administration Console
Example: Permitting only logistics managers, operations managers, and account representatives to create, update, or delete fulfillment centers
By default, fulfillment center managers are authorized to create, update or delete the fulfillment centers associated with their store. The fulfillment center manager's access group includes the roles: Seller, Logistics Manager, Operations Manager, and Account Representative. In some cases, you might not want Sellers to be authorized as fulfillment center managers.
To make this change, do the following:
- Determine the resource-level policy that authorizes fulfillment center managers to manage fulfillment centers.
- Remove the seller role from the definition of the fulfillment center managers access group.
Remove the seller role from the access group
- Find the resource-level policy that authorizes procurement shopping cart managers to manage procurement shopping carts for orders. The policy is:
FulfillmentCenterManagersForOrgExecuteFulfillmentCenterManage CommandsOnFulfillmentResource
- From the Organization Administration Console, click Access Management > Access Groups.
- From the list of access groups, select FulfillmentCenterManagersForOrg.
- Click Change to display the Change Access Group page.
- Click Access Management > Access Groups.
- Click Change to display the Details page.
- Click Criteria to display the Criteria page.
- From the Role list, select Seller.
- Click Remove.
- Click OK.
Update the access control policy registry with the changes
- Open the Administration Console.
- Click Configuration > Registry.
- From the list of registries, select Access Control Policies.
- Click Update.