Team Members | Cartly Help Center

Managing Team Members

Invite team members to your Cartly admin panel and control what they can access with role-based permissions.

Inviting a Team Member

Navigate to Settings → Team and click Invite Member. Enter their email address and select a role. An invitation email is sent with a link to create their account and join your store.

Roles

Cartly provides the following roles:

Owner — Full access to everything, including billing and store deletion. Only one owner per store.
Admin — Full access to all features except billing management and ownership transfer.
Staff — Access to day-to-day operations: products, orders, customers, and content. Cannot change settings, integrations, or team members.

View-Only Pages for Staff

Many pages that only the store owner or an admin can change, such as Settings, Taxes, Currencies, Locations, Inventory, Customer Groups and Gift Cards, still open for staff. They show a "View only" notice at the top and their fields and buttons are disabled, so staff can look but not change anything, and see why instead of getting an error.

Managing Permissions

For staff members, you can further customize access by enabling or disabling specific sections:

Products — Create, edit, and delete products
Orders — View and manage orders, process fulfillment
Customers — View and edit customer profiles
Discounts — Create and manage discounts
Content — Manage pages, blog posts, and navigation
Analytics — View store analytics and reports

Two-Step Verification for Sensitive Actions

If two-step verification is turned on for your account, Cartly asks for a current code before these actions: creating an API key, giving a team member the Admin role, inviting someone as an Admin (and resending that invitation), and confirming or rejecting an unconfirmed refund. Enter the code from your authenticator app. Once accepted, it stays valid for 5 minutes, so you do not need to repeat it for each action in that time. Inviting someone as Staff does not need a code.

Revoking Access

To remove a team member, go to Settings → Team, click the member, and select Remove. Their session is immediately invalidated and they can no longer access your admin panel. Their past actions remain in the audit log.

Audit Trail

Every action taken by a team member is recorded in the audit log with their name and timestamp. Navigate to Settings → Activity Log to see who changed what and when. This is essential for accountability in multi-person teams.

Security Best Practices

Grant the minimum permissions needed for each role
Use individual accounts — never share login credentials
Remove access promptly when a team member leaves
Review the audit log regularly for unexpected changes
Encourage team members to enable two-factor authentication

Staff Account Limits

The number of staff accounts depends on your subscription plan. The Starter plan includes 3 accounts, Growth includes 5, Pro includes 15, and Enterprise includes unlimited accounts. The store owner does not count toward the limit.