Managing Authorization Policies
Commerce Server 2009 uses Windows Authorization Manager to help secure business user roles, such as a Catalog Manager or Marketing Author. Authorization Manager is built into Windows Server 2003 and Windows Server 2008, and provides a role-based security model that you use to set permissions. With role-based access control, you specify access control relative to the organizational structure of your company.
For more information about Authorization Manager, see https://go.microsoft.com/fwlink/?LinkId=16923.
Note
If you add a local user account to a group with role permissions in Authorization Manager, the local user must log out and log on again to use the appropriate roles.