Volusion is a hosted e-commerce platform with a tiered admin role system that controls access to different areas of the store admin panel. The permission model is simpler than self-hosted platforms -- roles are pre-defined with fixed permission sets, and access is scoped to functional areas (Orders, Products, Marketing, etc.) rather than individual records or content items. Volusion V2 (the current version) has a modernized admin but retains a straightforward role structure.
Permission model
Volusion's access control has two separate user systems:
- Admin users -- staff accounts that access the Volusion admin panel. Each admin is assigned a role that determines which dashboard sections they can view and modify. Roles are pre-defined; you cannot create custom roles with arbitrary permission combinations.
- Storefront customers -- shoppers who create accounts for checkout, order tracking, and wishlists. Customers have no admin panel access and are managed separately.
Admin permissions are section-based: a role either grants access to a dashboard section (Orders, Products, Marketing, Reports, Settings) or it does not. There are no per-product, per-order, or per-page permission scopes.
Available admin roles
| Role | Access areas | Limitations |
|---|---|---|
| Owner | Full admin access: all sections, billing, user management, API keys | One per account, cannot be removed |
| Administrator | All admin sections except billing and account ownership | Cannot transfer ownership or manage subscription |
| Marketing Manager | Marketing tools, coupons, SEO settings, newsletters | No order processing, no product management, no settings |
| Order Manager | Orders, returns, customer management | No product management, no marketing, no settings |
| Inventory Manager | Products, categories, inventory levels | No orders, no marketing, no settings |
| Customer Service | Orders (view only), customer management, returns | Cannot edit products, no marketing, no settings |
| Read Only | View all sections, no editing capability | Cannot create, edit, or delete anything |
Admin UI paths
| Task | Location |
|---|---|
| Manage admin users | Settings > Admin Users |
| Invite admin user | Settings > Admin Users > Add User (email + role) |
| Change admin role | Settings > Admin Users > [User] > Edit Role |
| Remove admin user | Settings > Admin Users > [User] > Remove |
| Customer management | Customers > All Customers |
| Customer groups | Customers > Customer Groups |
| Activity log | Settings > Activity Log (available on higher plans) |
API access management
Volusion API (V2):
- REST API at
https://api.volusion.com/v2/ - Authentication via OAuth2 Bearer tokens
- API credentials (client ID + secret) generated at Settings > API Access
- Scopes control resource access: products, orders, customers, categories, inventory
- Rate limited per plan tier
Legacy API (V1):
- XML-based API at
/net/WebService.aspx - Authentication via encrypted URL with admin credentials
- Being deprecated in favor of V2 REST API
- Still used by some older integrations
Webhook/integration management:
- Volusion supports app integrations through the Volusion App Store
- Each app requests specific data access during installation
- Manage installed apps at Settings > Apps & Integrations
- Revoke app access by uninstalling
Analytics-specific permissions
Volusion provides built-in analytics with role-based visibility:
- Dashboard -- the admin home screen shows sales summary, order counts, and traffic overview. Visible to all admin roles that have dashboard access.
- Reports section -- detailed sales, product, customer, and marketing reports. Accessible to Owner, Administrator, and Marketing Manager roles. The Read Only role can view reports but not export.
- Google Analytics integration -- configured at Marketing > SEO > Google Analytics. Enter the Measurement ID. Requires Marketing Manager, Administrator, or Owner role.
- Google Tag Manager -- add via Marketing > SEO > Header/Footer Scripts. Same role requirements as Google Analytics.
- Facebook Pixel / conversion tracking -- configured in Marketing > Social or via Header Scripts injection. Marketing Manager role required.
- E-commerce tracking -- Volusion can send transaction data to GA automatically when the integration is enabled. Configuration requires Marketing Manager or above.
- Built-in SEO tools -- SEO settings per product, category, and page are accessible to any role that has access to that content area (e.g., Inventory Manager can edit product SEO fields).
To give an analytics team member reporting access without broader store management:
- Assign the Read Only role for full visibility without edit capability
- For analytics configuration access, assign Marketing Manager which covers marketing reports and tracking setup
- Share Google Analytics/GTM access through those platforms' own user management for deeper data analysis
The Activity Log (on higher plans) tracks admin actions including who modified marketing and analytics settings, providing an audit trail for tracking code changes.
Sub-pages
- Roles and Permissions -- admin role capabilities, section access matrix, and customer group management
- Adding and Removing Users -- inviting admin users, changing roles, API credential management, and deactivation