Customer Journey Analytics is governed by three levels of access or three roles: Product Admin role, Product Profile Admin role, and user-level access. This topic explains these roles in more detail.
In addition, we discuss more granular ways to limit access, such as Workspace curation and row-level as well as value-level access control.
Product Admins have permissions to complete any task necessary within Customer Journey Analytics. You must be added as an Product Admin to the Customer Journey Analytics Product Profile in the Admin Console under Customer Journey Analytics > Admins tab > Add Admin. Product admins are granted the following permissions:
Becoming a product admin in Customer Journey Analytics alone is not enough to create, update, or delete a connection. To create a connection to an Experience Platform dataset, you also need Experience Platform permissions. Specifically, you must be part of an Experience Platform Product Profile that gives you the following permissions:
For more information on Experience Platform permissions, see Access control in Adobe Experience Platform.
A product profile is a set of permissions. Product Profile Admins can
Create and manage individual product profiles, such as adding new users or managing user groups and their associated product profiles.
In Customer Journey Analytics, edit data views that are part of a product profile that they manage. They cannot create new data views.
Users in Customer Journey Analytics cannot create, edit, or view data views or connections. Users can create filters, projects, audiences, and calculated metrics with special permissions in the Admin Console.
Another level of access control can be used at the Workspace reporting level. You can limit access to specific components for certain users. For more information on how to limit components (dimensions, metrics, filters, date ranges) at the Workspace project level, and how curation is tied to data views, see Curate projects.
You cannot grant or deny permissions for individual metrics or dimensions in Customer Journey Analytics like you can in traditional Adobe Analytics. Metrics and dimensions can be modified in data views and are thus subject to change in Customer Journey Analytics. Changing them also retroactively changes reporting.
Here are a few use cases that illustrate how access control can be used in real-life scenarios.
A third party that your company works with has a team lead that can be made Product Profile admin. This admin then can add users on his team to this product profile. This admin can give access to specific data views and add other users to this product profile. They can also modify those data views over which they have control to fit their team’s needs.
Let’s say you wanted to give users access to data from one day only. Here is how you would limit access to those specific rows:
Users who have access to a data view can only work with the metrics and dimensions that the Admin has included in this data view. Admins can use the Include/Exclude functionality in data views to, for example, exclude certain dimension values from a data view.
Here is a healthcare-related example: Let’s say you create a metric called “Hypertension” in a data view, from a dataset that includes this data. The fact that it’s a metric would allow you to see the aggregate value of this metric, but not the individual patients who fall under it.
The Permissions tab is part of each product profile in Admin Console. You can add users to specific product profiles. Then you assign rights to specific data views and specify which permissions the users in a product profile have. Here are the Customer Journey Analytics-specific permissions:
|Data Views||If you toggle Auto-Include to On, users that are part of this product profile can view all existing and newly created data views. If this setting is set to Off, you can select specific data views that users have access to.|
|Audit Logs Access||This permission enforces the permission check on the API and the audit logs UI.|
|Reporting Usage Admin||Lets users view and delete any report running in their company.|
|Reporting Usage View||Lets users see all of the concurrent reporting requests.|
|Full Table Export||Lets users export full tables to the cloud.|
|Calculated Metrics Creation||Lets users create calculated metrics.|
|Filter Creation||Lets users create filters.|
|Labs Access||Lets users access the Labs tab in Customer Journey Analytics.|
|Annotation Creation||Lets users create annotations.|
|Audience Creation||Lets users create audiences.|
|Audience View||Lets users view audiences.|