Descriptions of Role Permissions
Below is a list of all available permissions that you can assign to your roles. Permissions are generally associated with specific functional areas inside Marketo and can help you control what areas and functionality different users have access to.
Some additional information about permissions:
- The “Access” permission gives a role permission to view and sometimes edit that part of the application.
- For a role to have access to the sub-permissions (“Create”, “Delete”, etc.), that role must have “Access” permission to that part of the application. For example, if you want to give someone permission for Edit Campaigns, they must have overall permission to Access Marketing Activities.
- You may be able to see actions or assets that you do not have permission to use. However, if you try to access them, you’ll see a message warning you about your limited access.
When you create or edit a role, you can select which of the following permissions to allow for that role by checking the appropriate boxes.
View and make changes to settings in the My Account section of Admin.
- Access Audit Trail - Gives users access to both Asset Audit Trail and Admin Audit Trail
- Access Channels - Gives users access only to modify the Channel tag, not other custom tags
- Access Communication Limit - Gives users access to enable a communication limit in Admin
- Access CRM - Gives users access to the CRM, such as Salesforce or Microsoft Dynamics, in Admin
- Access Data.com - Gives users access to the Data.com flow action
- Access Email Admin - Gives users to Email Admin, to change default settings, such as unsubscribe and branding domains
- Access Event Partners - Gives users access to LaunchPoint in Admin
- Access Field Management - Gives users access to Field Management in Admin
- Access File Upload - Gives users the ability to upload images and files to the Design Studio
- Access Landing Pages - Gives users access to Landing Pages in Admin
- Access Location - Gives users access to Location in Admin for setting default language, locale, time zone, and currency
- Access Login History - Gives users access to User Login History in Audit Trail
- Access Login Settings - Gives users access to Login Settings in Admin for Security, IP Restrictions, and Smart List Report settings
- Access Marketo Custom Activity - Gives users access to Marketo Custom Activities in Admin
- Access Marketo Custom Object - Gives users access to Marketo Custom Objects in Admin
- Access Munchkin - GIves users access to Munchkin in Admin, for setting tracking code, person tracking, and enabling API configuration
- Access Revenue Cycle Analytics - Gives users access to Revenue Cycle Analytics in Admin, for setting Sync Summary and Attribution
- Access Roles - Gives users access to manage and edit roles, but not users
- Access Sales Insight - Gives users access to manage Sales Insight in Admin, for setting Status, API Configuration, Person Scoring, and other settings
- Access Single Sign-on - Gives users access to manage Single Sign-on in Admin, for enabling SAML and working with SAML settings and Redirect Page URLs
- Access Smart Campaign - Gives users access to Smart Campaign in Admin, for restricting limits on qualified people
- Access SOAP API - Gives users access to manage SOAP APIs in Web Services in Admin
- Access Tags - Gives users access to all custom tags except the Channel tag
- Access Treasure Chest - Gives users access to the experimental features in the Treasure Chest in Admin
- Access Users - Gives users access to edit and manage users (but not roles) in Admin
- Access Webhooks - Gives users to Webhooks in Admin, for setting details and Response Mappings
- Access Workspaces and Partitions - Gives users access to create, edit, and delete Workspaces and Partitions in Admin
Gives users with the API Only Role access to the individual APIs listed below.
- Approve Assets
- Execute Campaign
- Read-Only Activity
- Read-Only Activity Metadata
- Read-Only Assets
- Read-Only Campaign
- Read-Only Company
- Read-Only Custom Object
- Read-Only Person
- Read-Only Named Account
- Read-Only Opportunity
- Read-Only Sales Person
- Read-Write Activity
- Read-Write Activity Metadata
- Read-Write Assets
- Read-Write Campaign
- Read-Write Company
- Read-Write Custom Object
- Read-Write Person
- Read-Write Named Account
- Read-Write Opportunity
- Read-Write Sales Person
Gives users access to the Analytics tabs, Email Insights, reports, and the three items below, unless they are unchecked.
- Access Revenue Explorer - Unchecking removes user’s access to Revenue Explorer
- Delete Report - Unchecking removes user’s ability to delete reports
- Export Analytics Data - Unchecking removes user’s ability to export Analytics data
Access Calendar Presentations
Gives users access to Calendar presentations - enables display of the Presentations button at the bottom.
- Edit Calendar Presentations - Enables users to edit presentations in Calendar
Access Design Studio
Gives users access to the Design Studio tab and view of the tree, but not to details.
View the database as well as view and edit smart/static lists.
- Approve Segmentation
- Delete Segmentation
- Edit Segmentation
Edit Person - Prevents manual editing and running single flow steps; you can still edit people by running campaigns against them
Export Person - Export spreadsheets with from your database lists
Import Custom Object
Run Single Flow Actions - Enables users to run Change Data Value flow step on people from the database
View Opportunity Data - Hides the opportunity info on the person detail page
Access Marketing Activities
View the Marketing Activities tab, campaigns, and campaign folders.
- Administer SEO
- Standard SEO
Targeting and Personalization
- Administer Web Personalization
- CRE Campaign Editor
- CRE Campaign Launcher
- Web Campaign Editor
- Web Campaign Launcher
- Admin access for a specific Workspace (only if you have Workspaces enabled)
- Move assets between Workspaces (only if you have Workspaces enabled)