For more details see the Advanced Permissions for Magento 2 extension page.
Provide limited access to your store management for different admin users. Benefit from advanced role permissions to let specific managers work with particular products, categories, product attributes, websites, and store views.
To create a new sub-admin role with advanced permissions, please navigate to Admin panel → System → Permissions → User Roles. Then, hit the Add New Role button.
Then, you can assign this role to certain users. Click the Role Users tab and flag the required users.
With the extension, you can set up advanced permissions to provide or limit access for your store managers to the certain parts of the admin panel.
In this tab you can limit access to certain store views or websites. Modify the Limit Access To option to:
For the websites and store views option you should specify the required ones.
For the website and store views options you can limit user role access to the following parts of your store:
Select between the Yes or No options.
In the Categories tab you can provide this role with access to all product categories or limit to selected categories. Please tick the necessary categories or subcategories to allow access to them.
Next, the Products tab enables you to provide access to all, only selected, or own created products. In second case you will need to flag the required product. In third, you can make products accessible only for their owners that is convenient for the multi-vendor stores.
In the Product Attributes tab you can restrict access to certain product attributes. Set the Allow Access To option to Selected Attributes and specify the desired attributes for this user role.
Finally, in the Admin User Role tab you can allow this user to create the new users with the selected roles. Choose the appropriate option from the dropdown menu and select the required roles.
When the configuring of a certain user role is done, hit the Save Role button.
If you need to add extra users to your admin panel, please go to System → Permissions → All Users and hit the Add New User button.
Specify account information and switch to the User Role tab. From here you can tick the desired radio-button to provide this user with certain administrative privileges. When done, hit the Save User button.
Return to the previous steps to know how to set up a user role with advanced permissions.
To provide selective access to a certain product you can set up its owner.
Find out how to install the Advanced Permissions extension via Composer.