Permission levels

Each product profile is composed of permissions allowing users to access the different features.
They can be divided into two types:

• High-level permission: represents the different permissions that can be assigned to Product profile in the Admin console, such as Publish journeys and Manage subdomains delegation. High level permissions encompass low level permissions.

• Low-level permission: represents the different permissions that come from the high level permission.

For example, the Journey administrator product profile is assigned the Manage journeys permission. From this permission results the low-level permissions which will allow the Journey administrator to write, read and delete journeys.

Journey capability

Manage journeys permission

The Manage journeys high-level permission allows users to create new and edit/delete existing Journeys, as well as access to the objects that are used in the journey canvas to build the journey flow.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • journeys.read
  • journeys.write
  • journeys.delete
  • messages.read

• Adobe Experience Platform specific:

  • segments.read
  • profiles.read
  • datasets.read
  • schemas.read

Publish journeys permission

The Publish journeys high-level permission allows users to publish journeys.

It includes the following low-level permissions:

• Journey Optimizer specific:
  • journeys.publish
  • journeys.read

View journeys permission

The View journeys high-level permission allows users to browse and view journeys.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • journeys.read

• Adobe Experience Platform specific:

  • segments.read
  • profiles.read

Manage journeys events, data sources and actions permission

The Manage journeys events, data sources and actions high-level permission allows users to configure event and data configurations.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • journeys_events.read
  • journeys_events.write
  • journeys_events.delete
  • journeys_data_sources.read
  • journeys_data_sources.write
  • journeys_data_sources.delete
  • journeys_actions.read
  • journeys_actions.write
  • journeys_actions.delete

• Adobe Experience Platform specific:

  • schemas.read
  • datasets.read
  • identity_namespace.read

View journeys events, data sources and actions permission

The View journeys events, data sources and actions high-level permission allows users to use event and data in the journey flow.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • journeys_events.read
  • journeys_data_sources.read
  • journeys_actions.read

• Adobe Experience Platform specific:

  • schemas.read
  • datasets.read
  • identity_namespace.read

View journeys report permission

The View journeys report high-level permission allows users to read-only journey report.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • journeys_report.read
  • messages_report.read

• Adobe Experience Platform specific:

  • datasets.read
  • queries.read
  • queries.write
  • queries.delete

Decision management capability

Manage decisions permission

The Manage decisions high-level permission allows users to create new and edit/delete existing Activity entities, as well as manage the objects that are used in those activities to make the decisions.

It includes the following low-level permissions:

• Decision management specific:

  • activities.read
  • activities.write
  • activities.delete
  • offers.read
  • offers.write
  • offers.delete
  • placements.read
  • placements.write
  • placements.delete
  • ranking_strategy.read

• Adobe Experience Platform specific:

  • datasets.read
  • datasets.write
  • datasets.delete
  • schemas.read
  • profile.read
  • segments.read

View decisions permission

The View decisions high-level permission allows users to use an existing Activity and related business objects to make the decisions.

It includes the following low-level permissions:

• Decision management specific:

  • activities.read
  • offers.read
  • placements.read
  • ranking_strategy.read

• Adobe Experience Platform specific:

  • schemas.read
  • segment.read
  • datasets.read
  • datasets.write
  • datasets.delete

Publish offers decisioning permission

The Publish offers decisioning high-level permission allows users to access to approve/un-approve Offer activities.

It includes the following low-level permissions:

• Decision management specific:

  • offers_activity.read
  • offers.read
  • offers.write
  • offers.delete
  • placements.read
  • placements.write
  • placements.delete
  • ranking_strategy.read

• Adobe Experience Platform specific:

  • schemas.read
  • segment.read
  • datasets.read
  • profiles.read

Manage ranking strategies permission

The Manage ranking strategies high-level permission allows users to read, create, edit, and delete ranking strategies.

It includes the following low-level permissions:

• Decision management specific:
  • ranking_strategy.read
  • ranking_strategy.write
  • ranking_strategy.delete
  • activities.read
  • offers.read
  • placements.read

Administration capability

Manage subdomains delegation permission

The Manage subdomains delegation high-level permission allows users to create, edit and delete subdomain delegations (including IP pool).

It includes the following low-level permissions:

• subdomains_delegation.read
• subdomains_delegation.write
• subdomains_delegation.delete

Manage PTR records permission

The Manage PTR records high-level permission allows users to read and edit PTR records that have been configured based on the subdomain.

It includes the following low-level permissions:

• PTR_records.read
• PTR_records.write
• subdomains_delegation.read

View PTR records permission

The View PTR records high-level permission allows users to view PTR records that have been configured based on the subdomain.

It includes the following low-level permissions:

• PTR_records.read
• subdomains_delegation.read

Manage IP pools permission

The Manage IP pools high-level permission allows users to create, edit and delete the affinity definition.

It includes the following low-level permissions:

• IP_pools.read
• IP_pools.write
• IP_pools.delete

Manage channel surface permission

The Manage channel surface high-level permission allows users to create, edit and delete channel surfaces across channels at the sandbox level.

It includes the following low-level permissions:

• Journey Optimizer specific:
  • messages_presets.read
  • messages_presets.write
  • messages_presets.delete
  • subdomains_delegation.read
  • IP_pools.read
  • mobile_setting.read (from Adobe Experience Platform Launch)

View channel surface permission

The View channel surface high-level permission allows users to view channel surfaces in order to know which channel surfaces to use.

It includes the following low-level permissions:

• messages_presets.read
• subdomains_delegation.read
• IP_pools.read
• mobile_setting.read (from Adobe Experience Platform Data Collection)

Manage suppression permission

The Manage suppression high-level permission allows users to define the number of bounces before an email address is added to the suppression list, as well as to add and delete entries to/from the suppression list.

It includes the following low-level permissions:

• suppression_rules.read
• suppression_rules.write
• suppression_rules.delete
• suppression_list.write
• suppression_list.delete

View suppression list permission

The View suppression list high-level permission allows users to view the suppression list content and settings.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • suppression_list.view

• Adobe Experience Platform specific:

  • profiles.read
  • datasets.read

Export suppression list permission

The Export suppression list high-level permission allows users to download the suppression list as a CSV file.

It includes the following low-level permissions:

• Journey Optimizer specific:

  • suppression_list.export

• Adobe Experience Platform specific:

  • profiles.read
  • datasets.read

Manage landing page settings permission

The Manage landing page settings high-level permission allows users to read, create and edit landing page subdomains and preset settings.

It includes the following low-level permissions:

• Journey Optimizer specific:
  • landing_page_subdomain.read
  • landing_page_subdomain.write
  • landing_page_subdomain.delete
  • landing_page_preset.read
  • landing_page_preset.write
  • landing_page_preset.delete

Manage frequency rules permission

The Manage frequency rules high-level permission allows users to read, create, edit, delete and activate/deactivate frequency rules.

It includes the following low-level permissions:

• Journey Optimizer specific:
  • frequency_rules.read
  • frequency_rules.write
  • frequency_rules.delete

View frequency rules permission

The View frequency rules high-level permission allows users to view frequency rules.

It includes the following low-level permissions:

• Journey Optimizer specific:
  • frequency_rules.read

Business.Adobe.com resources