How to Define New Catalog Roles

Users cannot correctly run the Catalog Manager until you add them to the following tasks and built-in catalog roles:

Manage the whole Catalog System. Add users who perform this task to the CatalogAdministrator role.
Manage all catalogs but cannot manage the catalog schema. Add users who perform this task to the CatalogManager role.
Manage only individual catalogs. Add users who manage only individual catalogs to the CatalogEditor role for that catalog. If you want users who belong to the CatalogEditor role to add languages to the catalog, you should create a new role definition such as AddLanguages that contains the AddLanguagesOperation, and then add the users to this role.

If you want users who belong to the CatalogEditor role to edit the content of properties in that catalog, you should add them to the CatalogPropertyContentEditor role for these properties.

If you want users who belong to the CatalogEditor role to control the pricing of categories, products, and product variants in the catalog, you should add them to the CatalogPropertyContentEditor role in the PropertyScope_cy_list_price property scope.
Perform language translation tasks. Add users who perform this task, such as editing the multilingual content of a catalog in a particular language, to the CatalogTranslator role in that language scope.

You extend the Catalog Authorization Policy by creating new roles in the Catalog System.

Click Start, click Run, type azman.msc, and then click OK.
In the Authorization Manager screen, right-click Authorization Manager, and then click Open Authorization Store.
In the Open Authorization Store dialog box, verify that the XML file option is selected, and then click Browse to move to where the authorization policy for your catalog Web service is located, for example, <drive>:\Inetpub\wwwroot\CatalogWebService.
Select CatalogAuthorizationStore.xml, click Open, and then in the Open Authorization Store dialog box, click OK.
Expand the Authorization Policy to \CatalogAuthorizationStore.xml\ProductCatalogSystem\<PropertyScope name>\Definitions\Role Definitions.
Right-click Role Definitions and then click New Role Definition.
In the Role Definition dialog box, type the name and description for the role, and then click Add.
In the Add Definition dialog box, on the Roles tab, select the appropriate roles.
In the Add Definition dialog box, on the Tasks tab, select the tasks you want to add to the new role definition, on the Operations tab, select the operations you want to add to the new role definition, and then click OK.
In the Role Definition dialog box, click OK.
In the Authorization Manager screen, right-click Role Assignments, and then click Assign Roles.
In the Add Role dialog box, select the role definition you created in steps 6 through 10, and then click OK.

You can now assign users to the new role.

See Also