Below is a list of all available permissions that you can assign to your roles. Permissions are generally associated with specific functional areas inside Marketo and can help you control what areas and functionality different users have access to.
Some additional information about permissions:
The “Access" permission gives a role permission to view and sometimes edit that part of the application.
For a role to have access to the sub-permissions (“Create”, “Delete”, etc.), that role must have “Access” permission to that part of the application. For example, if you want to give someone permission for Edit Campaigns, they must have overall permission to Access Marketing Activities.
You may be able to see actions or assets that you do not have permission to use. However, if you try to access them, you’ll see a message warning you about your limited access.
Available Permissions
When you create or edit a role, you can select which of the following permissions to allow for that role by checking the appropriate boxes.
Access Admin
View and make changes to settings in the My Account section of Admin.
Access Audit Trail - Gives users access to both Asset Audit Trail and Admin Audit Trail
Access Channels - Gives users access only to modify the Channel tag, not other custom tags
Access Communication Limit - Gives users access to enable a communication limit in Admin
Access CRM - Gives users access to the CRM, such as Salesforce or Microsoft Dynamics, in Admin
Access Data.com - Gives users access to the Data.com flow action
Access Email Admin - Gives users to Email Admin, to change default settings, such as unsubscribe and branding domains
Access Event Partners - Gives users access to LaunchPoint in Admin
Access Field Management - Gives users access to Field Management in Admin
Access File Upload - Gives users the ability to upload images and files to the Design Studio
Access Landing Pages - Gives users access to Landing Pages in Admin
Access Location - Gives users access to Location in Admin for setting default language, locale, time zone, and currency
Access Login History - Gives users access to User Login History in Audit Trail
Access Login Settings - Gives users access to Login Settings in Admin for Security, IP Restrictions, and Smart List Report settings
Access Marketo Custom Activity - Gives users access to Marketo Custom Activities in Admin
Access Marketo Custom Object - Gives users access to Marketo Custom Objects in Admin
Access Munchkin - GIves users access to Munchkin in Admin, for setting tracking code, person tracking, and enabling API configuration
Access Revenue Cycle Analytics - Gives users access to Revenue Cycle Analytics in Admin, for setting Sync Summary and Attribution
Access Roles - Gives users access to manage and edit roles, but not users
Access Sales Insight - Gives users access to manage Sales Insight in Admin, for setting Status, API Configuration, Person Scoring, and other settings
Access Single Sign-on - Gives users access to manage Single Sign-on in Admin, for enabling SAML and working with SAML settings and Redirect Page URLs
Access Smart Campaign - Gives users access to Smart Campaign in Admin, for restricting limits on qualified people
Access SOAP API - Gives users access to manage SOAP APIs in Web Services in Admin
Access Tags - Gives users access to all custom tags except the Channel tag
Access Treasure Chest - Gives users access to the experimental features in the Treasure Chest in Admin
Access Users - Gives users access to edit and manage users (but not roles) in Admin
Access Webhooks - Gives users to Webhooks in Admin, for setting details and Response Mappings
Access Workspaces and Partitions - Gives users access to create, edit, and delete Workspaces and Partitions in Admin
Access API
Gives users with the API OnlyRole access to the individual APIs listed below.
Approve Assets
Execute Campaign
Read-Only Activity
Read-Only Activity Metadata
Read-Only Assets
Read-Only Campaign
Read-Only Company
Read-Only Custom Object
Read-Only Person
Read-Only Named Account
Read-Only Opportunity
Read-Only Sales Person
Read-Write Activity
Read-Write Activity Metadata
Read-Write Assets
Read-Write Campaign
Read-Write Company
Read-Write Custom Object
Read-Write Person
Read-Write Named Account
Read-Write Opportunity
Read-Write Sales Person
Access Analytics
Gives users access to the Analytics tabs, Email Insights, reports, and the three items below, unless they are unchecked.
Access Revenue Explorer - Unchecking removes user’s access to Revenue Explorer
Delete Report - Unchecking removes user’s ability to delete reports
Export Analytics Data - Unchecking removes user’s ability to export Analytics data
Access Calendar Presentations
Gives users access to Calendar presentations - enables display of the Presentations button at the bottom.
Edit Calendar Presentations - Enables users to edit presentations in Calendar
Access Design Studio
Gives users access to the Design Studio tab and view of the tree, but not to details.
Access Email
Edit Email - Gives users permission to edit, create, and clone emails
Make Email Operational - Gives users permission to make an email operational. See: Make an Email Operational