Permissions reference
Every permission in the console, what it unlocks, and which roles have it by default.
A permission is a Component plus an Action, written component:action (for example campaigns:view). A role is a set of permissions. This page lists what each permission unlocks and which built-in roles have it by default.
Before you start: defaults are what a role starts with. An Owner can change any role's grid, so check Settings, then Roles, for what your workspace actually uses. See Roles and permissions.
How permissions are applied
- A person without the permission for an area does not see its page in the sidebar, and the server refuses the request if they open the link directly.
- Owners can do everything. Admins have every permission except the abilities reserved for Owners (below).
- A role can differ between Test and Live with an overlay. The defaults for sending and publishing are in Test and Live rules.
- A workspace can give a person a different role from their account role. That role applies only in that workspace.
- Pages with no permission of their own, such as Home and your Account, are open to every signed-in member. Account, then My permissions, always shows your own.
Abilities reserved for Owners and Admins
These are not ordinary permissions. A custom role cannot be granted them.
| Ability | Who |
|---|---|
| Create, edit or reset a role and its permission grid | Owner only |
| Copy an invitation link for a pending invitation | Owner only |
| Make or revoke an Owner | Owner only |
| Suspend, remove or change the role of an Owner | Owner only. Admins cannot act on Owners. |
| See the Pending invitations list, with who invited and when | Owner and Admin |
| Create a workspace | Owner and Admin |
Defaults by area
Y means the role has the permission by default. An action other than View needs View as well.
Engage
| Permission (claim) | Unlocks | Owner | Admin | Manager | Developer | Marketer | Analyst | Custom internal | External |
|---|---|---|---|---|---|---|---|---|---|
Campaigns, View (campaigns:view) |
Open campaigns and their results | Y | Y | Y | Y | Y | Y | Y | Y |
Campaigns, Create and manage (campaigns:create_manage) |
Build and edit campaigns | Y | Y | Y | Y | Y | |||
Campaigns, Create, manage and publish (campaigns:create_manage_publish) |
Activate a campaign for a real audience | Y | Y | Y | |||||
Campaigns, Edit templates (campaigns:edit_templates) |
Edit message content inside a campaign | Y | Y | Y | Y | Y | |||
Campaigns, Download (campaigns:download) |
Download campaign reports | Y | Y | Y | Y | ||||
Flows, View (flows:view) |
Open flows and monitoring | Y | Y | Y | Y | Y | Y | Y | |
Flows, Create and manage (flows:create_manage) |
Build and edit flows | Y | Y | Y | Y | Y | |||
Flows, Create, manage and publish (flows:create_manage_publish) |
Publish a flow | Y | Y | Y | |||||
Flows, Edit templates (flows:edit_templates) |
Edit message content inside a flow | Y | Y | Y | Y | Y | |||
Flows, Download (flows:download) |
Download flow reports | Y | Y | Y | Y | ||||
Smart links, View (smartlinks:view) |
Open Smart Links and its dashboard | Y | Y | Y | Y | Y | Y | Y | Y |
Smart links, Create and manage (smartlinks:create_manage) |
Create links and change domains | Y | Y | Y | Y | Y |
Content
| Permission (claim) | Unlocks | Owner | Admin | Manager | Developer | Marketer | Analyst | Custom internal | External |
|---|---|---|---|---|---|---|---|---|---|
Content and templates, View (content_templates:view) |
Open templates | Y | Y | Y | Y | Y | Y | Y | Y |
Content and templates, Create and manage (content_templates:create_manage) |
Write and edit templates | Y | Y | Y | Y | Y | |||
Content and templates, Create, manage and publish (content_templates:create_manage_publish) |
Publish a template | Y | Y | Y | |||||
Content and templates, Download (content_templates:download) |
Download template reports | Y | Y | Y | Y | ||||
Coupons, View (coupons:view) |
Open coupon pools | Y | Y | Y | Y | Y | Y | Y | |
Coupons, Create and manage (coupons:create_manage) |
Create and allocate pools | Y | Y | Y | Y | ||||
Coupons, Publish (coupons:publish) |
Publish a pool | Y | Y | Y | |||||
Coupons, Download (coupons:download) |
Download pool reports | Y | Y | Y | Y | ||||
Recommendations and catalog, View (recommendations_catalog:view) |
Open catalogs | Y | Y | Y | Y | Y | Y | Y | |
Recommendations and catalog, Create and manage (recommendations_catalog:create_manage) |
Change catalogs | Y | Y | Y | Y | ||||
Recommendations and catalog, Download (recommendations_catalog:download) |
Download catalog data | Y | Y | Y | Y | Y |
Audience
| Permission (claim) | Unlocks | Owner | Admin | Manager | Developer | Marketer | Analyst | Custom internal | External |
|---|---|---|---|---|---|---|---|---|---|
Segments, View (segments:view) |
Open segments and RFM | Y | Y | Y | Y | Y | Y | Y | |
Segments, Create and manage (segments:create_manage) |
Build segments, Save as segment from a drill-down | Y | Y | Y | Y | Y | |||
Segments, Download (segments:download) |
Download segment reports | Y | Y | Y | Y | ||||
Users, View (users:view) |
Search users, open profiles and drill-down people lists | Y | Y | Y | Y | Y | Y | Y | |
Users, Download (users:download) |
Reveal full email and mobile (audited) | Y | Y | Y |
Analytics and ad spend
| Permission (claim) | Unlocks | Owner | Admin | Manager | Developer | Marketer | Analyst | Custom internal | External |
|---|---|---|---|---|---|---|---|---|---|
Dashboard and analyze, View (dashboard_analyze:view) |
Open dashboards, funnels and reports | Y | Y | Y | Y | Y | Y | Y | Y |
Dashboard and analyze, Run analysis (dashboard_analyze:run_analysis) |
Run funnels, reports and drill-downs | Y | Y | Y | Y | Y | Y | ||
Dashboard and analyze, Create and manage (dashboard_analyze:create_manage) |
Build custom dashboards, funnels and reports | Y | Y | Y | Y | Y | |||
Dashboard and analyze, Download (dashboard_analyze:download) |
Download aggregate CSVs | Y | Y | Y | Y | Y | |||
Acquisition and spend, View spend (acquisition:view_spend) |
Ad platforms, Campaigns and Audience, and the Marketing dashboard | Y | Y | Y | Y | ||||
Experiments, View (experiments:view) |
Open measurement and holdout results | Y | Y | Y | Y | Y | Y | Y | Y |
Experiments, Create and manage (experiments:create_manage) |
Change the global holdout | Y | Y | Y | Y |
The Smart Links dashboard needs smartlinks:view. The Marketing dashboard needs acquisition:view_spend. A dashboard you lack the permission for is hidden, and opening its link sends you back to the dashboard list.
Data and connections
| Permission (claim) | Unlocks | Owner | Admin | Manager | Developer | Marketer | Analyst | Custom internal | External |
|---|---|---|---|---|---|---|---|---|---|
Ad platforms, View (ad_platforms:view) |
Open connections, conversions and Spend sync state | Y | Y | Y | Y | Y | Y | ||
Ad platforms, Create and manage (ad_platforms:create_manage) |
Connect, reconnect, map conversions, change Spend sync | Y | Y | Y | Y | ||||
Imports, View (imports:view) |
Open import history | Y | Y | Y | Y | Y | Y | Y | |
Imports, Create and manage (imports:create_manage) |
Run imports | Y | Y | Y | Y | Y | |||
Imports, Download (imports:download) |
Download import results | Y | Y | Y | Y | ||||
Exports, View (exports:view) |
Open the exports list | Y | Y | Y | Y | Y | Y | ||
Exports, Create and manage (exports:create_manage) |
Create aggregate exports | Y | Y | Y | |||||
Exports, Download (exports:download) |
Download an export | Y | Y | Y | Y | ||||
Integrations, View (integrations:view) |
Open partner connections | Y | Y | Y | Y | Y | Y | ||
Integrations, Create and manage (integrations:create_manage) |
Change partner connections | Y | Y | Y | Y |
Settings and administration
| Permission (claim) | Unlocks | Owner | Admin | Manager | Developer | Marketer | Analyst | Custom internal | External |
|---|---|---|---|---|---|---|---|---|---|
Team management, View (team_management:view) |
Open Team and the members list | Y | Y | Y | Y | ||||
Team management, Create and manage (team_management:create_manage) |
Invite, change roles, suspend, change workspace access | Y | Y | ||||||
Roles and permissions, View (roles:view) |
Open Roles and read each grid | Y | Y | Y | |||||
Channels and providers, View (channels:view) |
Open providers and routing | Y | Y | Y | Y | Y | Y | ||
Channels and providers, Create and manage (channels:create_manage) |
Change providers and routing | Y | Y | Y | Y | ||||
API keys, View (api_keys:view) |
List keys | Y | Y | Y | Y | ||||
API keys, Create and manage (api_keys:create_manage) |
Create, rotate and revoke keys | Y | Y | Y | |||||
Storage and settings, View (settings:view) |
Open storage settings | Y | Y | Y | Y | ||||
Storage and settings, Create and manage (settings:create_manage) |
Change storage providers | Y | Y | Y | |||||
Privacy requests, View (privacy:view) |
Open privacy requests | Y | Y | Y | |||||
Privacy requests, Create and manage (privacy:create_manage) |
Erase a person | Y | Y | ||||||
Audit logs, View (audit_logs:view) |
Open the change log | Y | Y | Y | Y | Y | Y | ||
Audit logs, Download (audit_logs:download) |
Download the change log | Y | Y | Y | Y | ||||
Billing, View (billing:view) |
Open plan and usage | Y | Y | Y | Y | ||||
Billing, Create and manage (billing:create_manage) |
Change plan and payment | Y | Y |
Everyone can open their own Account and My permissions. Anyone with the Roles page open sees the roles, but only an Owner sees the edit controls.
Test and Live rules
Separately from permissions, each role has a rule for each environment.
| Role | Test | Live |
|---|---|---|
| Owner, Admin, Manager | Send and publish to everyone | Send and publish to everyone |
| Developer | Send and publish to everyone | Send to test users only. Cannot publish to a real audience |
| Marketer | Send, cannot publish | Send, cannot publish |
| Custom internal | Send, cannot publish | Send, cannot publish |
| Analyst | Read and analyse only | Read and analyse only |
| External | No audience | Read-only, reporting only |
Check one permission
- Open Settings, then Roles, and select a role.
- Find the area in the grid and read the column for the action.
- Switch to Test overlay or Live overlay to see whether the environment changes it.
Related
Was this page helpful?