Permission management for data collection in Experience Platform

Data collection in Adobe Experience Platform is comprised of several different technologies which work together to collect and transfer your data. Access to these technologies is controlled through granular role-based permissions in Adobe Admin Console.

This guide shows you how to manage permissions for data collection features.

Getting started

In order to configure access control for data collection, you must have administrator privileges for an organization that has a product integration with Adobe Experience Platform Data Collection. The minimum role that can grant or withdraw permissions is a product profile administrator. Other administrator roles that can manage permissions are product administrators (can manage all profiles within a product) and system administrators (no restrictions). See the article on administrative roles in the Adobe Enterprise administration guide for more information.

This guide assumes you are familiar with basic Admin Console concepts like product profiles and how they grant product permissions to individual users and groups. For more information, see the Admin Console user guide.

Available permissions

The relevant permissions for Data Collection are provided through two product designations in Admin Console: Adobe Experience Platform and Adobe Experience Platform Data Collection. The sections below outline the permissions provided under each product along with descriptions of the specific capabilities that they grant access to.

Adobe Experience Platform permissions

Permissions under Adobe Experience Platform include access to datastreams, identities, schemas, and sandboxes. For steps on how to configure Adobe Experience Platform permissions, see the access control user guide.

Category Permission Description
Sandboxes (N/A) Depending on the sandboxes that have been created under your organization, you can control access to each of them through this permission category in Admin Console.
Data Modeling Manage Schemas Grants the ability to view, create, and edit Experience Data Model (XDM) schemas.
Data Modeling View Schemas Grants read-only access to schemas.
Identity Management Manage Identity Namespaces Grants the ability to view, create, and edit identity namespaces.
Identity Management View Identity Namespaces Grants read-only access to identity namespaces.
Data Collection Manage Datastreams Grants the ability to view, create, and edit datastreams.
Data Collection View Datastreams Grants read-only access to datastreams.

Adobe Experience Platform Data Collection permissions

Permissions under Adobe Experience Platform Data Collection control access to tags and event forwarding capabilities, including properties, extensions, and environments. For steps on how to configure Adobe Experience Platform Data Collection permissions, see the section below.

Category Permission Description
Platforms Web Grants access to web properties when combined with other property rights.
Platforms Mobile Grants access to mobile properties when combined with other property rights.
Properties (N/A) Depending on the properties that have been created under your organization, you can control access to each of them through this permission category in Admin Console.

A user’s assigned property rights only apply to the properties they have been granted access to through this permission category.
Property Rights Approve Grants the ability to approve a library build as part of the publishing flow.
Property Rights Develop Grants the ability to develop a library build as part of the publishing flow.
Property Rights Edit Property Grants the ability to edit the basic configuration for the properties a user has access to.
Property Rights Manage Environments Grants the ability to manage the environments for the properties a user has access to.
Property Rights Manage Extensions Grants the ability to manage the extensions for the properties a user has access to.
Property Rights Publish Grants the ability to publish a library build as part of the publishing flow.
Company Rights Develop Extensions Grants the ability to create and modify extension packages that are owned by your organization, including private releases and requests for public release.
Company Rights Manage Extensions This permission is only applicable if you have a license for Adobe Journey Optimizer or another solution that grants access to mobile in-app and push messaging. This allows you to manage the apps that Adobe Experience Cloud knows about along with the necessary push credentials needed to communicate with the Firebase Cloud Messaging service and the Apple Push Notification service.
NOTE

For more information on how these permissions affect capabilities in tags, including administration strategies for common scenarios, see the tags documentation on user permissions.

Manage permissions

As outlined in the previous section, permissions for data collection are managed through two product designations in Admin Console: Adobe Experience Platform and Adobe Experience Platform Data Collection.

To manage these permissions, log in to Admin Console and select Products from the top navigation. From here, select the product card for the permissions you want to configure. Refer to the subsections below for steps on how to manage the relevant permissions under each product in Admin Console:

Manage permissions under Adobe Experience Platform

From the Products view in Admin Console, select Adobe Experience Platform Data Collection. Select the product profile that you want to edit permissions for, then navigate to the Permissions tab.

In order to access data collection features, you must enable all permissions in the Sandboxes, Data Modeling, Identity Management, and Data Collection categories.

Image showing the Data Collection product card in Admin Console

See the access control UI guide for detailed instructions on managing Platform permissions.

NOTE

Depending on the product SKUs your organization has access to, you may not have every Platform permission available to you.

Manage permissions under Adobe Experience Platform Data Collection

From the Products view in Admin Console, select Adobe Experience Platform Data Collection.

Image showing the Data Collection product card in Admin Console

Select or create a product profile

The next screen shows a list of available product profiles for Data Collection under your organization, the default profile being Default Data Collection All Access. You can choose to edit the default product profile if you wish, or you can select New Profile to create one. If you have multiple roles or user groups in your organization that require different levels of access, you should create a separate product profile for each of them.

Image showing the product profiles for Data Collection in Admin Console

After selecting or creating a product profile, you can use the Edit icons to start editing permissions for the profile, or select the Users tab to start assigning users to the profile.

Image showing the permissions tab for a product profile Admin Console

Edit permissions for the product profile

When editing permissions for a profile, available permissions are listed in the left column while those that are included in the profile are listed in the right column. Select the listed permissions to move them between either column.

Image showing permissions added under the included column

Permissions are organized into categories. To switch between categories, select the desired category from the left navigation.

Image showing the company rights section under permissions

Select Save once you have finished configuring permissions.

Image showing the permission configuration being saved for the product profile

The product profile view reappears with the added permissions reflected.

Image showing the added permissions for the product profile

Assign users to the product profile

To assign users to the product profile (and grant them the profile’s configured permissions), select the Users tab, followed by Add user.

Image showing the users tab for a product profile in Admin Console

For more information on managing users for a product profile, see the Admin Console documentation.

Next steps

This guide covered the available permissions for Data Collection and how to manage them through Admin Console. For more information on managing permissions for other Adobe Experience Platform capabilities, refer to the access control documentation.

On this page