On this page: Use object level access control to restrict individual objects such as journeys, campaigns, and offers with access labels, so you can keep sensitive content and personal data limited to authorized users.
You can limit the access to an object based on access labels. This approach protects sensitive digital assets from unauthorized users and ensures further protection of personal data.
The Object level access control (OLAC) capability allows you to define authorizations to manage data access for a selection of objects:
- Journey
- Campaign
- Template
- Fragment
- Landing page
- Offer
- Static offer collection
- Offer decision
- Channel configuration
- IP warmup plan
Prerequisites prereq-labels
To be able to create labels, you must belong to a role with the Manage usage labels permission.
To be able to assign labels, you must belong to a role with a Manage permission i.e., Manage journeys, Manage Campaigns, or Manage decisions. Without this permission, the Manage access button is greyed out.
Learn more about permissions in this section.
Create labels create-labels
Labels allow you to categorize datasets and fields according to usage policies that apply to that data. Labels can be applied at any time, providing flexibility in how you govern data.
Use labels to provide access to users, and enforce data governance and consent policies. These governance labels can affect downstream consumption.
You can create labels in the Permissions product. For more details, refer to Adobe Experience Platform documentation.
You can also create Labels directly in Journey Optimizer. To create a label, follow these steps:
-
From an Adobe Journey Optimizer object, such as a newly created Campaign, click the Manage access button.
-
From the Manage access window, click Create label.
-
Configure your label. You must specify:
- Name
- Friendly name
- Description
-
Click Create to save your Label.
Your newly created Label is now available in the list. If needed, you can modify it in the Permissions product.
Assign labels assign-labels
To assign custom or core data usage labels to your Journey Optimizer objects:
-
From an Adobe Journey Optimizer object, such as a newly created Campaign, click the Manage access button.
-
From the Manage access window, select your custom or core data usage label(s) to manage access to this object.
For more information on core data usage labels, refer to this page.
-
Click Save to apply this label restriction.
To access this object, users must have the specific Label included in their Roles. For example, a user with the C1 label will only have access to C1-labeled or unlabeled objects.
For more details on how to assign a Label to a Role, refer to this page.
This section contains structured knowledge intended to support interpretation, retrieval, and question answering related to this topic.
For complete understanding, this information should be combined with the documentation on this page. Neither source is intended to stand alone; the page describes the feature, while this section provides additional context that helps disambiguate terminology, intent, applicability, and constraints.
- TL;DR: Object level access control (OLAC) lets you apply access labels to specific Journey Optimizer objects — such as journeys, campaigns, and offers — so that, to access an object, users must have the specific Label included in their Roles.
Intents:
- Create a custom access label directly in Journey Optimizer or via the Permissions product
- Assign access labels to Journey Optimizer objects (journeys, campaigns, offers, etc.)
- Limit access to an object with access labels, to protect sensitive digital assets from unauthorized users
- Understand which permissions are required to create and assign labels
Glossary:
- OLAC (Object level access control): A capability to define authorizations to manage data access for a selection of specific Journey Optimizer objects (product-specific)
- Label: Labels categorize datasets and fields according to usage policies; in OLAC, a Label assigned to an object limits access to users whose Roles include that Label (product-specific)
- Manage access: The button on an Adobe Journey Optimizer object (and the window it opens) used to create labels and to select labels that manage access to the object (product-specific)
- Core data usage labels: The page says you can assign custom or core data usage labels, and links to Adobe Experience Platform documentation for more information on core data usage labels (product-specific)
Guardrails:
- Creating labels requires the Manage usage labels permission (prerequisite)
- Assigning labels requires belonging to a role with a Manage permission, i.e., Manage journeys, Manage Campaigns, or Manage decisions; without it, the Manage access button is greyed out (prerequisite)
- Supported objects for OLAC labels: Journey, Campaign, Template, Fragment, Landing page, Offer, Static offer collection, Offer decision, Channel configuration, IP warmup plan
Terminology:
- Canonical name: Object level access control — Acronym: OLAC
- Variants: custom labels, core data usage labels (the page names both as labels you can assign to manage access to an object)
FAQ:
- Q: Can I create a label directly in Journey Optimizer without going to the Permissions product? — Yes; the page states you can also create Labels directly in Journey Optimizer: from an Adobe Journey Optimizer object, such as a newly created Campaign, click the Manage access button, then click Create label.
- Q: Which object types support OLAC labels? — Journey, Campaign, Template, Fragment, Landing page, Offer, Static offer collection, Offer decision, Channel configuration, and IP warmup plan.
- Q: What permission is needed to assign a label to a journey? — A role with a Manage permission, i.e., Manage journeys, Manage Campaigns, or Manage decisions; without this permission, the Manage access button is greyed out.
- Q: If a user has the C1 label in their role, which objects can they access? — Only C1-labeled or unlabeled objects.