Set up permissions

Transcript

In this video, we’ll show you how to set up role-based permissions in Customer Journey Analytics, including configuring more granular access control, such as access to individual rows and metric values. There are three role-based permission levels that govern Customer Journey Analytics. Product Administrator, Product Profile Administrator, and User. Each role has its own set of permissions based on the tasks they need to perform. These roles are configured and managed in the Adobe Admin Console. To access the Adobe Admin Console and configure these permissions, you need to be a System Admin or a Product Level Admin. A Product Administrator manages access control and oversees general governance within CJA. The Digital Analytics lead role in organizations is commonly assigned to this role. They work with other upper funnel roles, like data engineers and data architects, to ensure the data needed for analysis requirements is properly ingested into Experience Platform. Once the Experience Platform data is available, Product Administrators configure and maintain connections and data view settings. Managing connections requires permissions beyond the scope of CJA Product Administrator. This user must be added to the Experience Platform Product Profile that provides permissions to view and manage schemas, view and manage datasets, manage sources, and view identity namespaces. To learn how to set up permissions and product profiles for Adobe Experience Platform, refer to the Experience Platform documentation. Organizations may be very small with few team members or very large and formal with extended team roles to include BI and channel analysts and marketing operations. To support these varied team structures, Product Administrators create product profiles and assign Product Profile Administrators to them. Assigning other team members as Product Administrators makes the process of feature and user access management more decentralized and prevents bottlenecks. So, what is a Product Profile? It’s a collection of permissions and users who are assigned to them. User-level access is controlled through selective permissions in the product profile. These permissions span the capabilities of customer journey analytics across the categories of data views, data view tools, and reporting tools. We’ll see this in action during the demo. Let’s review what Product Profile Administrators can do. They can manage their assigned product profiles. This includes adding or removing users and user groups as well as modifying the permissions assigned to them. Edit data views that are assigned to their product profiles. Now, let’s see how these permissions are configured in the interface. We’ll start by adding a Product Administrator. Log in to the Adobe Admin Console UI and navigate to Products. Here you see all Adobe products you have access to. Click the Customer Journey Analytics product found under the Experience Cloud heading. You first land on the Product Profiles tab, which contains all default and custom product profiles. We’ll talk about this tab in a moment, but first, let’s take a quick look at the Admins tab. Here is a list of all Product-level Administrators for CJA. These users have the default permissions to perform most tasks in the product interface. If you have product-level or system-level permissions, you can add new Product Administrators by clicking the Add Admin button in the top right. For additional permissions, such as establishing connections with experience platform data sources, set these up in the Experience Platform Permissions user interface. Add CJA Product Administrators to roles with the appropriate permissions. Now, let’s take a look at the Product Profiles tab. A Product Profile combines a number of permissions for the product that can be assigned to individual users or user groups. For example, let’s say you want certain analysts on your team to only access a specific data view in the Analysis workspace. Start by creating a Product Profile. Click New Profile in the top right corner. In the dialog that appears, give your Product Profile a descriptive name. You can also add a display name and description. Once done, click Next and then Save. You see your new Product Profile added to the list here. When you open the Product Profile, you land in the Users tab. This shows all users assigned to this Product Profile or will be empty if new. To add a new user, click Add Users in the top right corner. In the dialog that appears, type in the username, user group, or email address of the user. If you want to add a user name associated with an Adobe ID or a Federated ID, further details about this user will auto-populate. If not, add the user’s first and last name here. Add more users or user groups as needed. Once done, click Save. The users added here will be assigned permissions you specify for this Product Profile. Let’s set up these permissions. In the Permissions tab, you manage the main access permissions for the Customer Journey Analytics capabilities that we discussed earlier, the Data Views, Reporting Tools, and Data View Tools. Currently, no permission items are included in this Product Profile, so we’ll add some. Click the Edit icon to open the editing dialog. Here you see the list of all permission items available divided into tabs. The Data Views tab contains a list of all data views created in your CJA instance. If you toggle Auto-Include to On here at the top, all data views will be included in the permission. Keeping the setting off lets you select specific data views that you want your users to access. For our example, we want to assign the users in this Product Profile to this specific data view. To add a permission item, click the plus next to it, and it will be added to the list of included permission items on the right. Add more permission items as needed. To remove a permission item from this list, simply click the Remove icon here or select Remove All to clear the list. Once done, click Save. Now the users added to this Product Profile will only have access to the data view you’ve selected. They will be able to analyze and report on all of the data brought into this data view. Let’s say you want your Lead BI Analyst to be the Product Profile Administrator for the product profile just created. Go to the Admins tab and click Add Admin on the top right. The process is the same as adding a user to the Product Profile. Type in a username or email address to find and add the user to whom you want to assign the Product Profile admin rights. After saving, the new Product Profile admin appears in the list. Next, we’ll configure more granular access control in the same Product Profile. This can be done by the Product Profile Administrator. Let’s say you want to limit what data users can see in the data view. In the interface, navigate to Data Management followed by Data Views. In the Settings tab, create a new segment that applies to the entire data view. For our example, we want to limit data to May 26, 2025. We’ll name the segment accordingly. Now search for the day dimension that we want to include and drag and drop it onto the segment definition. To complete the segment, the day should be equal to May 26, 2025. Once done, click Save. The segment has been added to the data view. When you save your data view, the segment will be applied to the data part of the datasets in the underlying connection. Any rows that don’t fit the segment definition are automatically excluded from the data view and not available to analysis workspace when using this data view. Since you’ve added this data view as a permission item for the Product Profile in the Adobe Admin Console, the users assigned to this product profile will only be able to view the rows and metric values you’ve specified for this data view. This wraps up the process of granting permissions to Customer Journey Analytics. Thanks for watching!