Before you troubleshoot
When a restricted role does not behave as expected, check these in order:- Is the user in the correct organization and brand?
- Is the related brand module enabled?
- Does the role include the required permission?
- Does the role include the required metrics for analytics widgets?
Common symptoms
“I cannot see a menu item”
Usually one of these is true:- the brand module is disabled
- the role is missing the related
*.viewpermission - the parent section is filtered because none of its child pages are allowed
- Missing
customers.viewmeans the Customers report item will not appear. - Missing
conversions.viewmeans conversions-related reports and lists stay hidden. - Billing has its own rules; see the next section.
“I set Admin, but they cannot see Billing”
That is expected. Admin covers every brand feature and managing members, but not Billing or organization settings. To give them Billing, an owner edits the role in Settings > Roles > Manage Permissions and ticks the Billing rows (Invoices View; Payment cards View, Create, Update, Delete; Plan View, Update), or Organization > Settings. You can add these to Admin itself, or create a role from the Finance preset. The exact boxes are in Give someone Billing.

“I can see Reports, but it opens a different page than expected”
Reports opens the first child page the user is allowed to access. That means:- a user with
customers.viewbut notconversions.viewmay land on Customers - a user with only custom-report access may land on Custom Reports
“I can see the page, but the dashboard is empty”
Check the role’s metrics, not just its permissions. If the role has no metric grants, the user will not see:- dashboard metric tiles
- dashboard cards
- the metrics table
“I can see Fulfillment, but not Integrations”
That can be correct.- Fulfillment list access follows conversions/report access
- Integrations visibility is a separate permission area
“They cannot see Roles”
Only owners can open Settings > Roles, whatever permissions their role has. Ask an owner to change the role, or to make them an owner.“I changed someone’s role and their brand roles or metrics changed”
Changing a person’s organization role resets their role on every brand and their visible metrics to the new role. Saving a role’s permissions or metrics does the same for everyone who holds it. Set per-brand roles and custom metrics again on the person’s page under Settings > Users. See Organization users.“I can see the menu, but the data will not load”
This usually means one of the following:- the menu permission is present, but a deeper action permission is missing
- the user has the page permission, but not the required module
- the role was configured with feature permissions but no metric grants
Example role setups
More examples, with the exact boxes to tick in the role editor, are in Organization roles.Example 1: Conversions and customers viewer
Use this when someone should review orders and customers, but not manage settings. Recommended permissions:conversions.viewcustomers.viewcustomers.exportonly if export is required
- add only the dashboard metrics they should see
- leave metrics empty if they should not see dashboard analytics
- Reports is visible
- Reports opens the first allowed report child
- Conversions and Customers are available
- Settings areas such as merchants/products/integrations remain hidden unless added
Example 2: Fulfillment operations user
Use this when someone should process fulfillment-related work. Recommended permissions:conversions.viewconversions.update
integrations.viewif they should inspect integration setupmerchants.viewif they need merchant settings or merchant-related selectors
- Fulfillment list is visible
- operational actions are available if update permission is present
- Integrations may still be hidden unless explicitly granted
Example 3: Dashboard-free support role
Use this when a teammate needs operational access but should not see analytics. Recommended permissions:- feature permissions needed for the role, such as
conversions.vieworcustomers.view
- none
- the user can still access allowed lists and reports
- dashboard metrics, cards, and metrics table stay hidden
Admin checklist
Before assigning a restricted role widely:- Test with a real non-owner account.
- Open the sidebar and verify only intended sections appear.
- Click Reports and confirm it opens the expected first child.
- Open the dashboard and confirm metrics visibility matches the role’s metric grants.
- Test one read action and one operational action relevant to that role.