Integration Permissions Overview integration-permissions-overview
This guide outlines the necessary permissions for seamless integration with Marketo Measure, ensuring each integration operates effectively and without issue.
Data Type
-
Web Interaction Data
-
B2B System Data
-
Ad Platform Data
Marketo Measure is tracking:
-
Account
-
Campaign
-
CampaignMember
-
Contact
-
CurrencyConversionRange
-
CurrencyStatus
-
Events
-
FieldHistory (Lead, Contact, and Opportunity)
-
Lead
-
Opportunity
-
OpportunityContactRole
-
OpportunityHistory
-
Tasks
Touchpoints created and other data are written into custom bizible fields on Account, Campaign, CampaignMember, Case, Contact, Lead, and Opportunity.
Salesforce Connected User Permissions (required)
Marketo Measure Administrator Permission Set For Dedicated User: Allow SFDC admin to perform CRUD operations on marketo measure objects.
View and Edit Converted Leads Permission Set: This allows Marketo Measure to decorate leads after they have been converted to contacts.
Salesforce Marketing User Checkbox: The Marketing User checkbox allows users to create campaigns and use the Campaign Import Wizards.
Marketo Measure Standard User: Gives a user the ability to read records from Marketo Measure objects.
Salesforce Standard Field Permissions
Salesforce standard objects and access
Salesforce Custom Field Permissions
We provide feature settings to hold custom salesforce fields that the customers can use. If these feature settings are defined then we need READ access to each of the salesforce fields saved in the feature setting (e.g., if CustomLeadSourceField setting value is equal to "LeadSource__c" then we require READ access to this field).
Marketo Measure is tracking:
-
Account
-
ActivityParty
-
ActivityPointer
-
Campaign
-
CampaignItem (CampaignList in our system)
-
CampaignResponse (CampaignMember in our system)
-
Contact
-
Lead
-
List (MarketingList in our system)
-
ListMember (MarketingListMember in our system)
-
Opportunity
-
Organization
-
TransactionCurrency (CurrencyConversionRange and CurrencyStatus in our system)
-
Appointment, CampaignActivity, Email, Fax, IncidentResolution, Letter, PhoneCall, RecurringAppointmentMaster, ServiceAppointment, Task
-
bizible2_bizible_abtest
-
bizible2_bizible_attribution_touchpoint
-
bizible2_bizible_event
-
bizible2_bizible_history
-
bizible2_bizible_touchpoint
Touchpoints created and other data are written into custom bizible fields on Account, Campaign, CampaignResponse, Contact, Lead, List, Opportunity, and PhoneCall
Marketo Measure User Permissions
We recommend creating a dedicated Marketo Measure User within Dynamics for us to export and import data through to avoid any issues with other users in your CRM. Take note of the username and password as well as the endpoint URL as this will be used when creating the Marketo Measure account.
Security Roles
If your organization uses Dynamics Security Roles, make sure the connected user, or the dedicated Marketo Measure User has sufficient read/write permissions to the required entities.
Security Roles are located here: Settings > Security > Security Roles
For Marketo Measure custom entities, we will need full permissions across all of our entities.
Dynamics Standard Field Permissions
Marketo Measure Dynamics Schema
Dynamics Custom Field Permissions
We need READ access for any field on the Lead or Contact entity that the customer wants to use for custom Suppress/Remove Touchpoint Settings rules.
We need READ access for any field on the Lead or Opportunity entity that the customer wants to use for Segment rules or Stage Mapping.
We need READ access for any field on the Campaign, CampaignResponse, and List entities that the customer wants to use for Syncing Campaign/MarketingList members.
We integrate with Facebook to:
-
Import customer ads data
-
Import customer ads cost data
-
Update client's ads by appending url parameters
Marketo Measure is tracking Accounts, Campaigns, Ad Groups, Ads, Filter IDs and URLs.
-
The ads_management permission is required to create campaigns, manage ads or fetch Ad metrics.
-
The email permission is required to allow users to login their Facebook email.
Scopes
ads_management
-
Programmatically create campaigns, manage ads, and fetch metrics.
-
Build ad management tools that provide innovative solutions and differentiated value for advertisers.
- Communicating with people and letting them log into your app with the email address associated with their Facebook profile.
Ad Platform Data
B2B System Data (Lead Gen Form Data, including forms and submissions, which categorized as CRM Activity).
-
Campaign Manager or Account Manager role is required for Marketo Measure to download cost data. (Scope row 1)
-
Super Admin (Page Admin Role, Scopes row 2) or Lead Gen Forms Manager (Paid Media Admin Role, Scopes row 3) is required for Marketo Measure to access lead gen forms data
-
Super Admin (Page Admin Role, Scopes row 2) or Sponsored Content Poster (Paid Media Admin Role, Scopes row 3) is required for Marketo Measure to manipulate auto-tagging
Scopes
Set up user role in portal (requires login to LinkedIn account) - User Roles Overview: User role, view and manage user permission, assign roles like account manager or campaign manager
Set up Page Admin Role -Page Admin Role Definitions: Page admin role, on the desired admin page
Set up Paid Media Admin Role (look for Paid Media Admin) -Paid Media Admin Definitions: Paid Media Admin Roles
-
User's primary Google Account email address is required
-
Campaign Manager permissions required to access Campaign Manager 360 account
-
View and manage DoubleClick advertisers reports
-
View and manage DoubleClick Campaign Managers display ad campaigns
Scopes
https://www.googleapis.com/auth/userinfo.email: See your primary Google Account email addresshttps://www.googleapis.com/auth/dfareporting: View and manage DoubleClick for Advertisers reports
https://www.googleapis.com/auth/dfatrafficking: View and manage your DoubleClick Campaign Manager's (DCM) display ad campaigns
We integrate with AdWords to:
-
Import customer ads data
-
Import customer ads cost data
-
Update client's ads by appending url parameters/updating Url Tracking Templates
Marketo Measure is tracking Campaigns, Ad Groups, Creatives, Site Links, and Keywords.
- User's primary Google Account email address is required
Scopes
https://www.googleapis.com/auth/userinfo.email: See your primary Google Account email address
- User must grant "offline access" via their Microsoft Account (Which grants Marketo Measure access to the End-User's UserInfo even when not logged in). See Microsoft's page on how to do so.
Scopes
https://learn.microsoft.com/en-us/deployoffice/overview-extended-offline-access: Maintain access to data you have given it access to permission.
The Marketo integration enables Marketo Measure to collect Marketo Activities, People, Programs, and Program Memberships. Additionally, Marketo Measure tracks Marketo cookies (Munchkin IDs) for the purposes of linking Marketo web activities to Marketo Measure lead touchpoints, as described here:
As a result of the Marketo Measure integration with Marketo, the Marketo Measure Cookie Id is also now mapped and synced with the Marketo Munchkin Id. This helps close the gap to attribute the anonymous first touch to a web session rather than attributing both the FT and LC touches to a Marketo Activity.
The customer must provide Marketo Measure with an Alias ID and FTP server credentials to a location that data will be uploaded to their Analytics instance.
Take note of the following information, as you will need it for some of the later steps in the process:
-
The Alias ID, which can be any value you want it to be. We recommend "marketomeasure_id"
-
The FTP server hostname and credentials (user name and password)