权限级别 high-low-permissions

在此页面上:​了解高级权限如何对每个资源的基础低级权限进行分组,以便您能够授予角色完全符合用户所需的功能访问权限。

每个角色均由允许用户访问不同功能的权限组成。

它们可以分为两种类型:

  • 高级权限:表示可以分配给​ 角色 ​的不同权限,如​ Publish journeys ​和​Manage subdomains delegation。 高级权限包括低级权限。 详细介绍了此页面的高级权限。

  • 低级权限:表示来自高级别权限的不同权限。

例如,Journey administrator​角色已分配​ Manage journeys ​权限。 此权限会产生低级权限,这些权限将允许历程管理员写入、读取和删除旅程。

{width="70%"}

历程资源 journey-capability

  • Manage journeys​高级权限允许用户创建新的和编辑/删除/停止/暂停现有历程,以及访问历程画布中用于构建历程流的对象。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • journeys.read
      • journeys.write
      • journeys.delete
      • message.read
    • 特定于Adobe Experience Platform:

      • segments.read
      • profiles.read
      • 数据集.read
      • schemas.read
  • Publish journeys​高级权限允许用户发布历程。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • journeys.publish
      • journeys.read
  • View journeys​高级权限允许用户浏览和查看历程。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • journeys.read
    • 特定于Adobe Experience Platform:

      • segments.read
      • profiles.read
  • Manage journeys events, data sources and actions​高级权限允许用户配置事件和数据配置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • journeys_events.read
      • journeys_events.write
      • journeys_events.delete
      • journeys_data_sources.read
      • journeys_data_sources.write
      • journeys_data_sources.delete
      • journeys_actions.read
      • journeys_actions.write
      • journeys_actions.delete
    • 特定于Adobe Experience Platform:

      • schemas.read
      • 数据集.read
      • identity_namespace.read
  • View journeys events, data sources and actions​高级权限允许用户在历程流中使用事件和数据。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • journeys_events.read
      • journeys_data_sources.read
      • journeys_actions.read
    • 特定于Adobe Experience Platform:

      • schemas.read
      • 数据集.read
      • identity_namespace.read
  • View journeys report​高级权限允许用户只读历程报告。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • journeys_report.read
      • message_report.read
    • 特定于Adobe Experience Platform:

      • 数据集.read
      • queries.read
      • queries.write
      • queries.delete

Journey Optimizer规则资源 journey-rules-capability

  • Manage frequency rules​高级权限允许用户读取、创建、编辑、删除和激活/停用频率规则。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • frequency_rules.read
      • frequency_rules.write
      • frequency_rules.delete
  • View frequency rules​高级权限允许用户查看频率规则。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:
      • frequency_rules.read

营销活动资源 campaign-capability

  • Export suppression list​高级权限允许用户将禁止列表下载为CSV文件。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • suppression_list.export
    • 特定于Adobe Experience Platform:

      • profiles.read
      • 数据集.read
  • Manage campaigns​高级权限允许用户创建新的和编辑/删除营销活动

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • campaign.read
      • campaign.write
      • campaign.delete
  • Publish campaigns​高级权限允许用户发布营销活动。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • 营销活动读取
      • campaign-publish
  • View campaigns report​高级权限允许用户读取和编辑营销活动报告。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • campaign.read
      • campaign-report.read

决策管理资源 decisions-permissions

  • Manage decisions​高级权限允许用户创建新的和编辑/删除现有的​Activity entities,以及管理这些活动中用于制定决策的对象。

    accordion
    此权限包括以下低级权限:
    • 决策管理特定:

      • activities.read
      • activities.write
      • activities.delete
      • offers.read
      • offers.write
      • offers.delete
      • placements.read
      • placements.write
      • placements.delete
      • ranking_strategy.read
    • 特定于Adobe Experience Platform:

      • 数据集.read
      • 数据集。写入
      • 数据集。删除
      • schemas.read
      • profile.read
      • segments.read
  • View decisions​高级权限允许用户使用现有活动和相关业务对象做出决策。

    accordion
    此权限包括以下低级权限:
    • 决策管理特定:

      • activities.read
      • offers.read
      • placements.read
      • ranking_strategy.read
    • 特定于Adobe Experience Platform:

      • schemas.read
      • segment.read
      • 数据集.read
  • Manage offers​高级权限允许用户创建、编辑和删除所有优惠、组件,读取决策和集合。

    accordion
    此权限包括以下低级权限:
    • 决策管理特定:

      • offers_activity.read
      • offers.read
      • offers.Write
      • offers.Delete
      • placements.Read
      • placements.Write
      • placements.Delete
      • ranking_strategy.read
    • 特定于Adobe Experience Platform:

      • schemas.read
      • segment.read
      • 数据集.read
      • profiles.read
  • Manage ranking strategies​高级权限允许用户读取、创建、编辑和删除排名策略。

    accordion
    此权限包括以下低级权限:
    • 决策管理特定:

      • ranking_strategy.read
      • ranking_strategy.write
      • ranking_strategy.delete
      • activities.read
      • offers.read
      • placements.read

渠道配置资源 administration-permissions

  • Manage file routing​高级权限允许用户创建、编辑和删除文件路由配置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • file_routing.read
      • file_routing.write
      • file_routing.delete
  • Manage IP pools​高级权限允许用户创建、编辑和删除关联定义。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • IP_pools.read
      • IP_pools.write
      • IP_pools.delete
  • Manage key registry​高级权限允许用户查看、创建、旋转和撤消密钥注册表中的密钥。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • key-registry.read
      • key-registry.write
  • Manage landing page settings​高级权限允许用户读取、创建和编辑登陆页面子域和预设设置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • landing_page_subdomain.read
      • landing_page_subdomain.write
      • landing_page_subdomain.delete
      • landing_page_preset.read
      • landing_page_preset.write
      • landing_page_preset.delete
  • Manage messages general settings​高级权限允许用户在沙盒级别创建、编辑和删除全局设置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • messages_general_settings.read
      • messages_general_settings.write
      • messages_general_settings.delete
    • 特定于Adobe Experience Platform:

      • schemas.read
  • Manage messages presets​高级权限允许用户在沙盒级别跨渠道读取、创建、编辑和删除渠道配置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • messages_presets.read
      • messages_presets.write
      • messages_presets.delete
      • subdomains_delegation.read
      • IP_pools.read
    • 数据收集特定:

      • Mobile_setting.read
  • Manage PTR records​高级权限允许用户读取和编辑已根据子域配置的PTR记录。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • PTR_records.read
      • PTR_records.write
      • subdomains_delegation.read
  • Manage seed lists​高级权限允许用户读取、创建、编辑和删除种子列表。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • seedlist.read
      • seedlist.write
      • seedlist.delete
  • Manage SMS subdomains​高级权限允许用户读取、创建、编辑和删除SMS子域。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • sms_subdomains.read
      • sms_subdomains.write
      • sms_subdomains.delete
  • Manage subdomains delegations​高级权限允许用户创建、编辑和删除子域委派(包括IP池)。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • subdomains_delegation.read
      • subdomains_delegation.write
      • subdomains_delegation.delete
  • Manage suppression​高级权限允许用户定义电子邮件地址添加到禁止列表之前的退回次数,以及向/从禁止列表添加和删除条目。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • suppression_rules.read
      • suppression_rules.write
      • suppression_rules.delete
      • suppression_list.write
      • suppression_list.delete
  • View file routing​高级权限允许用户查看文件路由配置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • file_routing.read
  • View key registry​高级权限允许用户查看密钥注册表列表和密钥详细信息。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:
      • key-registry.read
  • View messages general settings​高级权限允许用户查看邮件的一般设置,如执行地址。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • messages_general_settings.read
    • 特定于Adobe Experience Platform:

      • schemas.read
  • View messages presets​高级权限允许用户查看消息预设。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • messages_presets.read
      • subdomains_delegation.read
      • IP_pools.read
    • 数据收集特定:

      • Mobile_setting.read
  • View PTR records​高级权限允许用户查看已根据子域配置的PTR记录。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • PTR_records.read
      • subdomains_delegation.read
  • View suppression list​高级权限允许用户查看禁止显示列表内容和设置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • suppression_list.view
    • 特定于Adobe Experience Platform:

      • profiles.read
      • 数据集.read

AI协助资源 ai-permissions

  • Generate content​高级权限允许用户访问Journey Optimizer中的“生成内容”菜单。

    accordion
    包括以下低级权限:
    • 特定于Journey Optimizer:
      • ai-assistant-generated-content.generate

编排的活动资源 ai-orchestrated-campaign

  • Manage orchestrated campaigns​高级权限允许用户创建新的和编辑/删除编排的营销活动。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • orchestrated_campaigns.read
      • orchestrated_campaigns.write
      • orchestrated_campaigns.delete
      • cjm-web-subdomain.read
      • cjm-message.read
      • cjm-message.write
      • cjm-message.delete
      • cjm-library-item.read
      • cjm-message-general-setting.read
      • cjm-message-preset.read
      • cjm-message-preview-test.write
      • experiment.read
      • experiment.write
      • experiment.delete
    • 特定于Adobe Experience Platform:

      • identity-graph.read
      • segments.read
      • profiles.read
      • 数据集.read
      • schemas.read
      • sandboxes.view
  • Manage orchestrated campaigns admin​高级权限允许用户在Adobe Experience Platform配置文件和关系存储实体之间创建新的链接和编辑/删除链接及协调项。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • cjm-orchestrated-campaign-admin.read
      • cjm-orchestrated-campaign-admin.write
      • cjm-orchestrated-campaign-admin.delete
  • Publish orchestrated campaigns​高级权限允许用户发布编排的营销活动。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • cjm-orchestrated-campaign.read
      • cjm-orchestrated-campaign.publish
      • cjm-web-subdomain.read
      • cjm-message.read
      • cjm-message.publish
      • cjm-library-item.read
    • 特定于Adobe Experience Platform:

      • sandboxes.view
  • View orchestrated campaigns​高级权限允许用户查看编排的营销活动及其内容。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • cjm-orchestrated-campaign.read
      • cjm-message.read
      • cjm-library-item.read
      • cjm-message-general-setting.read
      • cjm-message-preset.read
      • experiment.read
    • 特定于Adobe Experience Platform:

      • sandboxes.view
      • segments.read
      • profiles.read
  • View orchestrated campaigns admin​高级权限允许用户查看管理员设置,但无法编辑设置。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • cjm-orchestrated-campaign-admin.read
  • View orchestrated campaigns report​高级权限允许用户在实时报告和业务报告中查看编排的营销活动效果。

    accordion
    此权限包括以下低级权限:
    • 特定于Journey Optimizer:

      • cjm-orchestrated-campaign-reports.read
      • cjm-message-report.read
      • cjm-channel-report.read
      • cjm-orchestrated-campaign.read
      • cjm-message.read
      • cjm-library-item.read
      • experiment.read
      • experiment-report.read
    • 特定于Adobe Experience Platform:

      • sandboxes.view
      • 数据集.read
      • queries.read
      • queries.write
      • queries.delete
AI Knowledge Reference

This section contains structured knowledge intended to support interpretation, retrieval, and question answering related to this topic.

For complete understanding, this information should be combined with the documentation on this page. Neither source is intended to stand alone; the page describes the feature, while this section provides additional context that helps disambiguate terminology, intent, applicability, and constraints.

  • TL;DR: Journey Optimizer roles are built from high-level permissions, each of which bundles the specific low-level API rights users need to read, write, publish, or delete resources across journeys, campaigns, decisions, channel configurations, and more.

Intents:

  • Understand the distinction between high-level and low-level permissions
  • Identify which low-level permissions are granted by each high-level permission
  • Configure roles precisely for journeys, campaigns, decision management, channel configurations, and orchestrated campaigns
  • Grant Generate content access for content generation
  • Understand what the Publish journeys permission allows compared to the Manage journeys permission

Glossary:

  • High-level permission: A named permission assigned to a role (e.g., Manage journeys, Publish journeys) that encompasses one or more low-level permissions (product-specific)
  • Low-level permission: A granular API-level right (e.g., journeys.read, journeys.write) derived from and included within a high-level permission (product-specific)
  • Role: A collection of users sharing the same permissions and sandboxes within the organization (product-specific)

Terminology:

  • Do not confuse: “High-level permission” (named right assignable to a role) ≠ “Low-level permission” (underlying granular API right, not directly assignable)
  • Do not confuse: “Manage journeys” (allows create, edit, delete, stop — including live, test mode, and dry run) ≠ “Publish journeys” (allows publish, start test mode, start dry run, pause, and resume journeys)
  • Do not confuse: “Manage journeys events, data sources and actions” (full CRUD on events, sources, actions) ≠ “View journeys events, data sources and actions” (read-only access to those objects)
  • Do not confuse: “Generate content” (access to AI Assistant in Journey Optimizer) ≠ other journey or campaign permissions
  • Do not confuse: “Test mode” (referenced in Publish journeys and Manage journeys as a journey execution mode that can be started or stopped) ≠ “Dry run” (a separate journey execution mode also referenced in those same permissions)

FAQ:

  • Q: Does the Manage journeys permission allow a user to publish journeys? — No; publishing journeys requires the separate Publish journeys high-level permission.
  • Q: What does the Generate content permission grant? — Access to AI Assistant in Journey Optimizer.
  • Q: Can a user configure journey events without the Manage journeys permission? — Yes; Manage journeys events, data sources and actions is a separate high-level permission covering event, data source, and action configuration.
  • Q: What low-level permissions are included in View journeys report? — journeys_report.read and messages_report.read, plus datasets.read, queries.read, queries.write, and queries.delete from Adobe Experience Platform.
recommendation-more-help
journey-optimizer-help