DocumentationJourney OptimizerJourney Optimizer Guide

Permission levels high-low-permissions

Last update: October 6, 2026

CREATED FOR:

  • Experienced
  • Admin
  • Developer

On this page: Understand how high-level permissions group the underlying low-level permissions for each resource, so you can grant roles exactly the feature access your users need.

style
shade-box

Each role is composed of permissions allowing users to access the different features.

They can be divided into two types:

  • High-level permission: represents the different permissions that can be assigned to Role, such as Publish journeys and Manage subdomains delegation. High-level permissions encompass low-level permissions. High-level permissions are detailed on this page.

  • Low-level permission: represents the different permissions that come from the high-level permission.

For example, the Journey administrator role is assigned the Manage journeys permission. From this permission results the low-level permissions which will allow the Journey administrator to write, read and delete journeys.

{width="70%"}

Journey resource journey-capability

  • Manage journeys high-level permission allows users to create new and edit/delete/stop/pause existing Journeys, as well as access to the objects that are used in the journey canvas to build the journey flow.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • journeys.read
      • journeys.write
      • journeys.delete
      • messages.read

    • Adobe Experience Platform specific:

      • segments.read
      • profiles.read
      • datasets.read
      • schemas.read

  • Publish journeys high-level permission allows users to publish journeys.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • journeys.publish
      • journeys.read

  • View journeys high-level permission allows users to browse and view journeys.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • journeys.read

    • Adobe Experience Platform specific:

      • segments.read
      • profiles.read

  • Manage journeys events, data sources and actions high-level permission allows users to configure event and data configurations.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • journeys_events.read
      • journeys_events.write
      • journeys_events.delete
      • journeys_data_sources.read
      • journeys_data_sources.write
      • journeys_data_sources.delete
      • journeys_actions.read
      • journeys_actions.write
      • journeys_actions.delete

    • Adobe Experience Platform specific:

      • schemas.read
      • datasets.read
      • identity_namespace.read

  • View journeys events, data sources and actions high-level permission allows users to use event and data in the journey flow.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • journeys_events.read
      • journeys_data_sources.read
      • journeys_actions.read

    • Adobe Experience Platform specific:

      • schemas.read
      • datasets.read
      • identity_namespace.read

  • View journeys report high-level permission allows users to read-only journey report.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • journeys_report.read
      • messages_report.read

    • Adobe Experience Platform specific:

      • datasets.read
      • queries.read
      • queries.write
      • queries.delete

Journey Optimizer rules resource journey-rules-capability

  • Manage frequency rules high-level permission allows users to read, create, edit, delete and activate/deactivate frequency rules.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • frequency_rules.read
      • frequency_rules.write
      • frequency_rules.delete

  • View frequency rules high-level permission allows users to view frequency rules.

    accordion
    This permission includes the following low-level permissions:
    • Journey Optimizer specific:
      • frequency_rules.read

Campaign resource campaign-capability

  • Export suppression list high-level permission allows users to download the suppression list as a CSV file.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • suppression_list.export

    • Adobe Experience Platform specific:

      • profiles.read
      • datasets.read

  • Manage campaigns high-level permission allows users to create new and edit/delete Campaigns

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • campaign.read
      • campaign.write
      • campaign.delete

  • Publish campaigns high-level permission allows users to publish campaigns.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • campaign-read
      • campaign-publish

  • View campaigns report high-level permission allows users to read and edit campaigns report.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • campaign.read
      • campaign-report.read

Decision management resource decisions-permissions

  • Manage decisions high-level permission allows users to create new and edit/delete existing Activity entities, as well as manage the objects that are used in those activities to make the decisions.

    accordion
    This permission includes the following low-level permissions:

    • Decision management specific:

      • activities.read
      • activities.write
      • activities.delete
      • offers.read
      • offers.write
      • offers.delete
      • placements.read
      • placements.write
      • placements.delete
      • ranking_strategy.read

    • Adobe Experience Platform specific:

      • datasets.read
      • datasets.write
      • datasets.delete
      • schemas.read
      • profile.read
      • segments.read

  • View decisions high-level permission allows users to use an existing Activity and related business objects to make the decisions.

    accordion
    This permission includes the following low-level permissions:

    • Decision management specific:

      • activities.read
      • offers.read
      • placements.read
      • ranking_strategy.read

    • Adobe Experience Platform specific:

      • schemas.read
      • segment.read
      • datasets.read

  • Manage offers high-level permission allows users to create, edit and delete all offers, components, read decisions and collections.

    accordion
    This permission includes the following low-level permissions:

    • Decision management specific:

      • offers_activity.read
      • offers.read
      • offers.Write
      • offers.Delete
      • placements.Read
      • placements.Write
      • placements.Delete
      • ranking_strategy.read

    • Adobe Experience Platform specific:

      • schemas.read
      • segment.read
      • datasets.read
      • profiles.read

  • Manage ranking strategies high-level permission allows users to read, create, edit, and delete ranking strategies.

    accordion
    This permission includes the following low-level permissions:

    • Decision management specific:

      • ranking_strategy.read
      • ranking_strategy.write
      • ranking_strategy.delete
      • activities.read
      • offers.read
      • placements.read

Channel configurations resource administration-permissions

  • Manage file routing high-level permission allows users to create, edit and delete file routing configurations.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • file_routing.read
      • file_routing.write
      • file_routing.delete

  • Manage IP pools high-level permission allows users to create, edit and delete the affinity definition.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • IP_pools.read
      • IP_pools.write
      • IP_pools.delete

  • Manage key registry high-level permission allows users to view, create, rotate, and revoke keys in the key registry.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • key-registry.read
      • key-registry.write

  • Manage landing page settings high-level permission allows users to read, create and edit landing page subdomains and preset settings.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • landing_page_subdomain.read
      • landing_page_subdomain.write
      • landing_page_subdomain.delete
      • landing_page_preset.read
      • landing_page_preset.write
      • landing_page_preset.delete

  • Manage messages general settings high-level permission allows users to create, edit and delete global settings at the sandbox level.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • messages_general_settings.read
      • messages_general_settings.write
      • messages_general_settings.delete

    • Adobe Experience Platform specific:

      • schemas.read

  • Manage messages presets high-level permission allows users to read, create, edit, and delete channel configurations across channels at the sandbox level.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • messages_presets.read
      • messages_presets.write
      • messages_presets.delete
      • subdomains_delegation.read
      • IP_pools.read

    • Data Collection specific:

      • Mobile_setting.read

  • Manage PTR records high-level permission allows users to read and edit PTR records that have been configured based on the subdomain.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • PTR_records.read
      • PTR_records.write
      • subdomains_delegation.read

  • Manage seed lists high-level permission allows users to read, create, edit and delete seed lists.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • seedlist.read
      • seedlist.write
      • seedlist.delete

  • Manage SMS subdomains high-level permission allows users to read, create, edit and delete SMS subdomains.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • sms_subdomains.read
      • sms_subdomains.write
      • sms_subdomains.delete

  • Manage subdomains delegations high-level permission allows users to create, edit and delete subdomain delegations (including IP pool).

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • subdomains_delegation.read
      • subdomains_delegation.write
      • subdomains_delegation.delete

  • Manage suppression high-level permission allows users to define the number of bounces before an email address is added to the suppression list, as well as to add and delete entries to/from the suppression list.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • suppression_rules.read
      • suppression_rules.write
      • suppression_rules.delete
      • suppression_list.write
      • suppression_list.delete

  • View file routing high-level permission allows users to view file routing configurations.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • file_routing.read

  • View key registry high-level permission allows users to view the key registry listing and key details.

    accordion
    This permission includes the following low-level permissions:
    • Journey Optimizer specific:
      • key-registry.read

  • View messages general settings high-level permission allows users to view messages general settings such as the execution address.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • messages_general_settings.read

    • Adobe Experience Platform specific:

      • schemas.read

  • View messages presets high-level permission allows users to view messages presets.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • messages_presets.read
      • subdomains_delegation.read
      • IP_pools.read

    • Data Collection specific:

      • Mobile_setting.read

  • View PTR records high-level permission allows users to view PTR records that have been configured based on the subdomain.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • PTR_records.read
      • subdomains_delegation.read

  • View suppression list high-level permission allows users to view the suppression list content and settings.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • suppression_list.view

    • Adobe Experience Platform specific:

      • profiles.read
      • datasets.read

AI assistance resource ai-permissions

  • Generate content high-level permission allows users to access to Generate content menu in Journey Optimizer.

    accordion
    It includes the following low-level permission:
    • Journey Optimizer specific:
      • ai-assistant-generated-content.generate

Orchestrated campaign resource ai-orchestrated-campaign

  • Manage orchestrated campaigns high-level permission allows users to create new and edit/delete Orchestrated campaigns.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • orchestrated_campaigns.read
      • orchestrated_campaigns.write
      • orchestrated_campaigns.delete
      • cjm-web-subdomain.read
      • cjm-message.read
      • cjm-message.write
      • cjm-message.delete
      • cjm-library-item.read
      • cjm-message-general-setting.read
      • cjm-message-preset.read
      • cjm-message-preview-test.write
      • experiment.read
      • experiment.write
      • experiment.delete

    • Adobe Experience Platform specific:

      • identity-graph.read
      • segments.read
      • profiles.read
      • datasets.read
      • schemas.read
      • sandboxes.view

  • Manage orchestrated campaigns admin high-level permission allows users to create new and edit/delete links and reconciliations between Adobe Experience Platform Profiles and Relational store entities.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • cjm-orchestrated-campaign-admin.read
      • cjm-orchestrated-campaign-admin.write
      • cjm-orchestrated-campaign-admin.delete

  • Publish orchestrated campaigns high-level permission allows users to publish Orchestrated campaigns.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • cjm-orchestrated-campaign.read
      • cjm-orchestrated-campaign.publish
      • cjm-web-subdomain.read
      • cjm-message.read
      • cjm-message.publish
      • cjm-library-item.read

    • Adobe Experience Platform specific:

      • sandboxes.view

  • View orchestrated campaigns high-level permission allows users to view Orchestrated campaign and its content.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • cjm-orchestrated-campaign.read
      • cjm-message.read
      • cjm-library-item.read
      • cjm-message-general-setting.read
      • cjm-message-preset.read
      • experiment.read

    • Adobe Experience Platform specific:

      • sandboxes.view
      • segments.read
      • profiles.read

  • View orchestrated campaigns admin high-level permission allows users to view the admin settings but can not edit settings.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • cjm-orchestrated-campaign-admin.read

  • View orchestrated campaigns report high-level permission allows users to view orchestrated campaign performances in both live and business report.

    accordion
    This permission includes the following low-level permissions:

    • Journey Optimizer specific:

      • cjm-orchestrated-campaign-reports.read
      • cjm-message-report.read
      • cjm-channel-report.read
      • cjm-orchestrated-campaign.read
      • cjm-message.read
      • cjm-library-item.read
      • experiment.read
      • experiment-report.read

    • Adobe Experience Platform specific:

      • sandboxes.view
      • datasets.read
      • queries.read
      • queries.write
      • queries.delete
AI Knowledge Reference

This section contains structured knowledge intended to support interpretation, retrieval, and question answering related to this topic.

For complete understanding, this information should be combined with the documentation on this page. Neither source is intended to stand alone; the page describes the feature, while this section provides additional context that helps disambiguate terminology, intent, applicability, and constraints.

  • TL;DR: Each role is composed of permissions, divided into high-level permissions (which encompass low-level permissions) and low-level permissions, with the page listing them per resource (journey, rules, campaign, decision management, channel configurations, AI assistance, and orchestrated campaign).

Intents:

  • Understand the distinction between high-level and low-level permissions
  • Identify which low-level permissions are granted by each high-level permission
  • Configure roles precisely for journeys, campaigns, decision management, channel configurations, and orchestrated campaigns
  • Identify the Generate content high-level permission, which allows users to access the Generate content menu in Journey Optimizer
  • Understand what the Publish journeys permission allows compared to the Manage journeys permission

Glossary:

  • High-level permission: A permission that can be assigned to a Role, such as Publish journeys and Manage subdomains delegation; high-level permissions encompass low-level permissions (product-specific)
  • Low-level permission: A permission that comes from the high-level permission (for example, journeys.read, journeys.write) (product-specific)
  • Role: Each role is composed of permissions allowing users to access the different features (product-specific)

Terminology:

  • Do not confuse: “High-level permission” (can be assigned to a Role) ≠ “Low-level permission” (comes from the high-level permission)
  • Do not confuse: “Manage journeys” (allows users to create new and edit/delete/stop/pause existing Journeys, and to access the objects used in the journey canvas) ≠ “Publish journeys” (allows users to publish journeys)
  • Do not confuse: “Manage journeys events, data sources and actions” (allows users to configure event and data configurations) ≠ “View journeys events, data sources and actions” (allows users to use event and data in the journey flow)

FAQ:

  • Q: Does the Manage journeys permission allow a user to publish journeys? — The page states that the Publish journeys high-level permission allows users to publish journeys, and its low-level permissions include journeys.publish; the low-level permissions listed for Manage journeys do not include journeys.publish.
  • Q: What does the Generate content permission grant? — It allows users to access the Generate content menu in Journey Optimizer (low-level permission ai-assistant-generated-content.generate).
  • Q: Can a user configure journey events without the Manage journeys permission? — Manage journeys events, data sources and actions is listed as its own high-level permission that allows users to configure event and data configurations; its low-level permissions include journeys_events.read, journeys_events.write, and journeys_events.delete.
  • Q: What low-level permissions are included in View journeys report? — journeys_report.read and messages_report.read, plus datasets.read, queries.read, queries.write, and queries.delete from Adobe Experience Platform.
recommendation-more-help
journey-optimizer-help