Customer Journey Analytics Access Control

Customer Journey Analytics is governed by three levels of access or three roles: Product Admin role, Product Profile Admin role, and user-level access. This topic explains these roles in more detail.

In addition, we discuss more granular ways to limit access, such as Workspace curation and row-level as well as value-level access control.

Product Admin role

Product Admins have permissions to complete any task necessary within Customer Journey Analytics. You must be added as an Product Admin to the Customer Journey Analytics Product Profile in the Admin Console under Customer Journey Analytics > Admins tab > Add Admin. Product admins are granted the following permissions:

• Create/update/delete connections or data views
• Update/delete projects, filters, calculated metrics, audiences, annotations, or filters created by other users
• Share Workspace projects to all users
• Manage reporting activity in the Reporting Activity Manager

Becoming a product admin in Customer Journey Analytics alone is not enough to create, update, or delete a connection. To create a connection to an Experience Platform dataset, you also need Experience Platform permissions. Specifically, you must be part of an Experience Platform Product Profile that gives you the following permissions:

• Data Modeling: View Schemas, Manage Schemas
• Data Management: View Datasets, Manage Datasets
• Data Ingestion: Manage Sources
• View Identity Namespaces

For more information on Experience Platform permissions, see Access control in Adobe Experience Platform.

Product Profile Admin role

A product profile is a set of permissions. Product Profile Admins can

• Create and manage individual product profiles, such as adding new users or managing user groups and their associated product profiles.

• In Customer Journey Analytics, edit data views that are part of a product profile that they manage. They cannot create new data views.

User-level access

Users in Customer Journey Analytics cannot create, edit, or view data views or connections. Users can create filters, projects, audiences, and calculated metrics with special permissions in the Admin Console.

Workspace project curation

Another level of access control can be used at the Workspace reporting level. You can limit access to specific components for certain users. For more information on how to limit components (dimensions, metrics, filters, date ranges) at the Workspace project level, and how curation is tied to data views, see Curate projects.

Grant access to individual metrics or dimensions

You cannot grant or deny permissions for individual metrics or dimensions in Customer Journey Analytics like you can in traditional Adobe Analytics. Metrics and dimensions can be modified in data views and are thus subject to change in Customer Journey Analytics. Changing them also retroactively changes reporting.

Use cases

Here are a few use cases that illustrate how access control can be used in real-life scenarios.

Third-party access

A third party that your company works with has a team lead that can be made Product Profile admin. This admin then can add users on his team to this product profile. This admin can give access to specific data views and add other users to this product profile. They can also modify those data views over which they have control to fit their team’s needs.

Row-level access control

Let’s say you wanted to give users access to data from one day only. Here is how you would limit access to those specific rows:

1. Create a filter in Customer Journey Analytics where Day equals the date you want them to have data access to.
2. In Data views > Settings, add that filter to the data view.
3. Save the data view and it auto-applies the filter to the dataset. Any rows that don’t fit the filter definition are now automatically excluded from the edited data view.
4. Create a new Product profile in Admin Console, add users to it and limit their access to this data view.

Value-level access control

Users who have access to a data view can only work with the metrics and dimensions that the Admin has included in this data view. Admins can use the Include/Exclude functionality in data views to, for example, exclude certain dimension values from a data view.

Here is a healthcare-related example: Let’s say you create a metric called “Hypertension” in a data view, from a dataset that includes this data. The fact that it’s a metric would allow you to see the aggregate value of this metric, but not the individual patients who fall under it.

Customer Journey Analytics permissions in Admin Console

The Permissions tab is part of each product profile in Admin Console. You can add users to specific product profiles. Then you assign rights to specific data views and specify which permissions the users in a product profile have. Here are the Customer Journey Analytics-specific permissions: