Leon here from the Shopify support team!
While it's possible to restrict what kind of access a staff member you create has within your account, it's not possible to restrict it to this extent. That is, while it's possible to grant a staff member permissions to see the orders section of your admin, it's not possible to further restrict them so they have access but are unable to process refunds.
Currently there is no workaround for something like this, but I've submitted it as a feature request on your behalf. Hopefully it's something we might be able to implement in the future! Feel free to give our support team a shout if you have any further questions about this at all.
I hope you're having a great day!
Has there been any forward movement on this request? To be honest, I'm really surprised this is not a feature in a multi-user ecommerce solution marketed to businesses other than sole proprieterships. Having no way to prevent staff who view, process, and fulfill orders from also issuing refunds on those same orders violates the fundmental business principle of separation of concerns. It will raise flags during an audit, and the only remediation we could offer at this point is to switch ecommerce solution provider.
We really love the features and ease of use of Shopify. It's almost perfect. Please consider getting this into a sprint at your ealiest convenience.
Hello Shopify Team,
Since you already rolled out [Order Edit] with a separate permission switch other than [Order]. Can you do a little more by adding a restriction to [Order Refund]? It's quite crucial because any staff who do fulfillment that must able to view orders - can do refunds without any limitation. Which would be a disaster if an employee wants to do some harm to the business.