Managing Access to Site Management Tools in SuiteCommerce

Site Management Tools (SMT) in SuiteCommerce Advanced, introduced in the Elbrus release and later, provide a robust platform for managing website content efficiently. The Escape to Login feature is a key functionality, allowing users to access SMT either by pressing the Esc key or navigating to a designated admin URL. This article explains how to configure this feature, log in to SMT, and ensure secure access to maintain the integrity of your Commerce web store.

To enable or disable the Escape to Login feature, navigate to Commerce > Websites > Configuration in your NetSuite account. Select the desired site and domain, then proceed to the Integrations > Site Management Tools subtab. Here, you can toggle the Disable Esc Key to Login option. Checking this box disables the Esc key, requiring users to access SMT through the admin URL: http://my.webstore/cms/3/admin/cms.jsp for Kilimanjaro or later releases, or http://my.webstore/cms/2/admin/cms.jsp for Elbrus. Clearing the box enables the Esc key, allowing users to press it on the website’s homepage to display the login screen or, if already logged into NetSuite, the SMT toolbar directly. To confirm your CMS Adapter version, check the SuiteCommerce Configuration under the same path.

Logging into SMT can be done in two ways. First, users can log into their NetSuite account, switch to a role with website management permissions, and either press the Esc_cntrol access. Esc key (if enabled) or visit the admin URL. Alternatively, users can log in directly on the website using their NetSuite credentials. Upon login, SMT evaluates the user’s assigned roles. If only one role has sufficient permissions, it is automatically selected. If multiple roles qualify, a list is displayed for the user to choose from. If no roles have the necessary permissions, a message indicates the user cannot manage content.

Security is paramount in SMT. Signing out is essential to prevent unauthorized access. Users can sign out by navigating to the User Portlet and selecting Sign Out from the dropdown menu. Additionally, SMT enforces an automatic logout after 160 minutes of inactivity, ensuring the website remains secure. This dual approach of manual and automatic sign-out helps safeguard sensitive website management functions.

To optimize your experience, ensure your NetSuite roles are correctly configured with appropriate permissions for SMT access. Regularly review these settings to align with your organization’s security policies and operational needs.

Leave a comment

Your email address will not be published. Required fields are marked *