====== E-Commerce B2B Roles and Permissions ======

Similar to other application areas in Dynamics NAV, access to E-Commerce B2B functionality within Dynamics NAV is controlled by using Permission Sets (Roles) that you assign to your Dynamics NAV users.

When setting up E-Commerce B2B, the standard Permission Sets are included in the [[admin:e-commerce_setup:base_configuration|base configuration package]].

E-Commerce Permission Sets are provided using the same principle as utilized by standard Dynamics NAV, that is - standard Permission Sets only control access to tables (Table Data objects), assuming the user will be granted to run all other types of objects, having at least the BASIC role assiged.

The table lists the Permission Sets included with E-Commerce B2B.

|< 100% 150px - >|
^ Permission Set ^ Description ^
| BASIC | The standard Dynamics NAV role, normally assigned to all users. See note below for E-Commerce amendment details. |
| ECM-SUPER | Grants full access to all E-Commerce B2B tables, including the setup. |
| ECM-REPLICATION | A special role to be assigned to the user account running E-Commerce Replication Service. |
| ECM-ITEM | Grants read-only access to Item-related E-Commerce features, e.g. Features, Attachments. |
| ECM-ITEM-EDIT | Grants full access to Item-related E-Commerce features, e.g. Features, Attachments. |
| ECM-ACCOUNT | Grants read-only access to Web Accounts. |
| ECM-ACCOUNT-EDIT | Grants full access to Web Accounts, including creating their passwords. |
| ECM-ORDER | Grants read-only access to Web Orders, their Lines and Event Log. |
| ECM-ORDER-EDIT | Grants full access to Web Orders, their Lines and Event Log. |
| ECM-SIGNUP | Grants full access to Web Sign-up Forms. |

===== Amendments to the BASIC Permission Set =====

A part of the replication mechanism used by E-Commerce B2B works in the Dynamics NAV user's context. Namely, it is the table change tracking that, once a user has changed a record that needs to be replicated to the Storefront, automatically registers the changed Record ID in the "E-Commerce Replication Queue" table, which is in turn processed by the Replication Service (another process in the server context).

Hence, all users having the chance of modifying records that need to be replicated, must have write access to the "E-Commerce Replication Queue" and read access to the tables supporting the change tracking functionality.

These amendments are included in the [[admin:e-commerce_setup:base_configuration|base configuration package]], and upon Applying the package, your BASIC Permission set will also include write access to Table Data 25026289 "E-Commerce Replication Queue", as well as read-only access to a few more tables within the E-Commerce B2B object range.

===== The ECM-REPLICATION Permission Set =====

The background replication process (which can be a NAS Service session or a Background Session in user's context) is responsible for processing the records whose changes were tracked and registered in the "E-Commerce Replication Queue" table, that is - the process must have the ability to read the actual record, pass the data to the Storefront, and update the "E-Commerce Replication Queue" to mark the record as replicated. In order to receive e.g. Web Orders in Dynamics NAV, the process must also be able to write the respective E-Commerce Add-on module tables in Dynamics NAV. The process also updates the replication monitoring statistics in Dynamics NAV.

Hence, the process must have read access to all the tables being replicated from NAV to the Storefront, and write access for any tables that hold the data received from the Storefront, e.g. Web Orders and Sign-up Forms.

The standard Permission Set that you should assign to the user account running the Replication Service is **ECM-REPLICATION**.

The ECM-REPLICATION Permission Set is included in the [[admin:e-commerce_setup:base_configuration|base configuration package]].