Access and permissions

Last updated: June 22, 2026

When you run your clothing store with teammates and also push the products you create out to the site that customers see, you need to decide "who can access what." You want to give your teammates a place to work with products while keeping what they can do appropriately limited, and for external sites, which are not people, you need to hand over a separate key that lets them read your content.

This group covers the flow of managing access for both people (your teammates) and programs (external sites). You bring teammates into the workspace, define what each teammate can do inside a Space through roles, and issue tokens for external sites that cannot log in. The pages below walk through each of those steps.

Pages in this group

  • Organization and Space: Invite teammates to an Organization and assign them to your store Space so you can work together in the same workspace.
  • Roles and permissions: Use a SpaceRole to define what a member can do inside a single Space (read, edit, delete, publish, and so on).
  • Tokens: Issue a secret key that grants access to content for external sites and programs where a person cannot log in.