Back to Details

b2c-users-roles

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

B2C Users and Roles Skill

B2C用户与角色技能

Use the 
b2c
CLI to manage users and roles across Account Manager (AM) and Business Manager (BM).
Tip: If 
b2c
is not installed globally, use 
npx @salesforce/b2c-cli
instead.
使用
b2c
CLI管理Account Manager（AM）和Business Manager（BM）中的用户和角色。
提示： 如果未全局安装
b2c
，可改用
npx @salesforce/b2c-cli
命令。

Overview

概述

AreaTopicDescription
Account Manager
am users
Create, update, delete AM users
Account Manager
am roles
List, grant, revoke AM roles (with optional tenant scope)
Account Manager
am orgs
List organizations
Account Manager
am clients
Manage API clients
Business Manager
bm roles
Create, delete instance-level BM roles
Business Manager
bm roles grant/revoke
Assign/unassign users to BM roles on an instance
Business Manager
bm roles permissions
Get/set role permissions on an instance
领域主题说明
Account Manager
am users
创建、更新、删除AM用户
Account Manager
am roles
列出、授予、撤销AM角色（支持可选租户作用域）
Account Manager
am orgs
列出组织
Account Manager
am clients
管理API客户端
Business Manager
bm roles
创建、删除实例级BM角色
Business Manager
bm roles grant/revoke
为实例上的用户分配/移除BM角色
Business Manager
bm roles permissions
获取/设置实例上的角色权限

Account Manager Users

Account Manager用户管理

bash
undefined
bash
undefined

list all users

列出所有用户

b2c am users list
b2c am users list

create a user

创建用户

b2c am users create --mail user@example.com --first-name Jane --last-name Doe --org MyOrg
b2c am users create --mail user@example.com --first-name Jane --last-name Doe --org MyOrg

get a user by login

通过登录名查询用户

b2c am users get user@example.com
b2c am users get user@example.com

update a user

更新用户信息

b2c am users update user@example.com --first-name Janet
b2c am users update user@example.com --first-name Janet

delete (disable) a user

删除（禁用）用户

b2c am users delete user@example.com
b2c am users delete user@example.com

reset a user to INITIAL state

重置用户为INITIAL状态

b2c am users reset user@example.com
undefined
b2c am users reset user@example.com
undefined

Account Manager Roles

Account Manager角色管理

bash
undefined
bash
undefined

list all AM roles

列出所有AM角色

b2c am roles list
b2c am roles list

list roles filtered by target type

按目标类型过滤列出角色

b2c am roles list --target-type User
b2c am roles list --target-type User

get role details

获取角色详情

b2c am roles get bm-admin
b2c am roles get bm-admin

grant a role to a user

为用户授予角色

b2c am roles grant user@example.com --role bm-admin
b2c am roles grant user@example.com --role bm-admin

grant a role with tenant scope

授予带租户作用域的角色

b2c am roles grant user@example.com --role bm-admin --scope tenant1,tenant2
b2c am roles grant user@example.com --role bm-admin --scope tenant1,tenant2

revoke a role

撤销角色

b2c am roles revoke user@example.com --role bm-admin
b2c am roles revoke user@example.com --role bm-admin

revoke only specific scope

仅撤销指定作用域的角色权限

b2c am roles revoke user@example.com --role bm-admin --scope tenant1
undefined
b2c am roles revoke user@example.com --role bm-admin --scope tenant1
undefined

Account Manager Organizations and API Clients

Account Manager组织与API客户端管理

bash
undefined
bash
undefined

list organizations

列出组织

b2c am orgs list
b2c am orgs list

list API clients

列出API客户端

b2c am clients list
b2c am clients list

create an API client

创建API客户端

b2c am clients create --display-name "My Client" --org MyOrg
b2c am clients create --display-name "My Client" --org MyOrg

reset API client password

重置API客户端密码

b2c am clients password my-client-id
undefined
b2c am clients password my-client-id
undefined

Business Manager Roles

Business Manager角色管理

BM role commands operate on a specific Commerce Cloud instance (via 
--server
or config).
bash
undefined
BM角色命令作用于特定的Commerce Cloud实例（通过
--server
参数或配置指定）。
bash
undefined

list BM roles on an instance

列出实例上的所有BM角色

b2c bm roles list --server my-sandbox.demandware.net
b2c bm roles list --server my-sandbox.demandware.net

get role details (with user list)

获取角色详情（包含关联用户列表）

b2c bm roles get Administrator --expand users
b2c bm roles get Administrator --expand users

create a custom role

创建自定义角色

b2c bm roles create MyCustomRole --description "Custom role for content editors"
b2c bm roles create MyCustomRole --description "Custom role for content editors"

delete a custom role (system roles cannot be deleted)

删除自定义角色（系统角色无法删除）

b2c bm roles delete MyCustomRole
b2c bm roles delete MyCustomRole

grant a BM role to a user on the instance

为实例上的用户授予BM角色

b2c bm roles grant user@example.com --role Administrator
b2c bm roles grant user@example.com --role Administrator

revoke a BM role from a user

撤销用户的BM角色

b2c bm roles revoke user@example.com --role Administrator
b2c bm roles revoke user@example.com --role Administrator

all commands support --json for machine-readable output

所有命令支持--json参数返回机器可读的输出

b2c bm roles list --json
undefined
b2c bm roles list --json
undefined

Business Manager Role Permissions

Business Manager角色权限管理

Permissions use a file-based get/set workflow since the API replaces all permissions at once.
bash
undefined
权限采用基于文件的读写工作流，因为API会一次性覆盖所有权限配置。
bash
undefined

view permission summary

查看权限概览

b2c bm roles permissions get Administrator
b2c bm roles permissions get Administrator

export permissions to a JSON file for editing

导出权限到JSON文件供编辑

b2c bm roles permissions get Administrator --output admin-perms.json
b2c bm roles permissions get Administrator --output admin-perms.json

edit the file, then apply

编辑文件后应用配置

b2c bm roles permissions set Administrator --file admin-perms.json

The permissions JSON has four sections: `functional`, `module`, `locale`, and `webdav`. Each can be scoped to organization, site, or unscoped depending on type.
b2c bm roles permissions set Administrator --file admin-perms.json

权限JSON包含四个部分：`functional`、`module`、`locale`和`webdav`。根据类型不同，每个部分的作用域可以是组织、站点，或者无作用域。

Authentication Requirements

认证要求

OperationsClient CredentialsUser Auth
AM Users and RolesUser Administrator role on API clientAccount Administrator or User Administrator
AM OrganizationsNot supportedAccount Administrator
AM API ClientsNot supportedAccount Administrator or API Administrator
BM RolesOCAPI permissions for 
/roles
resource		OCAPI permissions for 
/roles
resource
操作客户端凭证用户认证
AM用户与角色管理API客户端需具备User Administrator角色账户管理员或用户管理员
AM组织管理不支持账户管理员
AM API客户端管理不支持账户管理员或API管理员
BM角色管理
/roles
资源的OCAPI权限
/roles
资源的OCAPI权限

Related Skills

相关技能

  • b2c-cli:b2c-config
    - Configure authentication credentials and instance settings
  • b2c-cli:b2c-sandbox
    - Create and manage sandboxes (instances)
  • b2c-cli:b2c-config
    - 配置认证凭证和实例设置
  • b2c-cli:b2c-sandbox
    - 创建和管理沙箱（实例）