在此页面上：使用对象级别的访问控制来限制具有访问标签的单个对象，例如历程、营销活动和优惠，以便您可以将敏感内容和个人数据限制为仅供授权用户使用。
您可以根据访问标签限制对对象的访问。 这种方法可以保护敏感数字资产免受未经授权用户的访问，确保进一步保护个人数据。
对象级访问控制(OLAC)功能允许您定义用于管理所选对象的数据访问的授权：
- 历程
- 促销活动
- 模板
- 片段
- 登陆页面
- 产品建议
- 静态优惠收藏集
- 优惠决策
- 渠道配置
- IP预热计划
先决条件 prereq-labels
要创建标签，您必须属于具有 管理使用标签 权限的角色。
要能够分配标签，您必须属于具有 管理 权限的角色，即Manage journeys、Manage Campaigns或Manage decisions。 如果没有此权限，管理访问权限按钮将灰显。
可在此部分中详细了解权限。
创建标签 create-labels
标签允许您根据应用于该数据的使用策略对数据集和字段进行分类。 标签可以随时应用，从而灵活地管理数据。
使用标签为用户提供访问权限，并强制实施数据治理和同意策略。 这些治理标签可能会影响下游消费。
您可以在Permissions产品中创建标签。 有关详细信息，请参阅Adobe Experience Platform文档。
您也可以直接在Journey Optimizer中创建标签。 要创建标签，请执行以下步骤：
-
从Adobe Journey Optimizer对象（例如新创建的营销活动）中，单击 管理访问权限 按钮。
Adobe Journey Optimizer中的
-
在 管理访问权限 窗口中，单击创建标签。
-
配置您的标签。 您必须指定：
- 名称
- 友好名称
- 描述
-
单击 创建 以保存您的标签。
您新创建的 标签 现在在列表中可用。 如果需要，您可以在Permissions产品中修改它。
分配标签 assign-labels
要将自定义或核心数据使用标签分配给您的Journey Optimizer对象，请执行以下操作：
-
从Adobe Journey Optimizer对象（例如新创建的营销活动）中，单击 管理访问权限 按钮。
Adobe Journey Optimizer中的
-
从 管理访问权限 窗口中，选择自定义或核心数据使用标签以管理对此对象的访问权限。
有关核心数据使用标签的详细信息，请参阅此页面。
-
单击 保存 以应用此标签限制。
要访问此对象，用户必须在其 角色 中包含特定的标签。 例如，具有C1标签的用户将只能访问带有C1标签或未标签的对象。
有关如何将 标签 分配给 角色 的详细信息，请参阅此页面。
This section contains structured knowledge intended to support interpretation, retrieval, and question answering related to this topic.
For complete understanding, this information should be combined with the documentation on this page. Neither source is intended to stand alone; the page describes the feature, while this section provides additional context that helps disambiguate terminology, intent, applicability, and constraints.
- TL;DR: Object level access control (OLAC) lets you apply access labels to specific Journey Optimizer objects — such as journeys, campaigns, and offers — so that, to access an object, users must have the specific Label included in their Roles.
Intents:
- Create a custom access label directly in Journey Optimizer or via the Permissions product
- Assign access labels to Journey Optimizer objects (journeys, campaigns, offers, etc.)
- Restrict sensitive content to authorized users only
- Understand which permissions are required to create and assign labels
Glossary:
- OLAC (Object level access control): A capability to define authorizations to manage data access for a selection of specific Journey Optimizer objects (product-specific)
- Label: Labels categorize datasets and fields according to usage policies; in OLAC, a Label assigned to an object limits access to users whose Roles include that Label (product-specific)
- Manage access: The button on an Adobe Journey Optimizer object (and the window it opens) used to create labels and to select labels that manage access to the object (product-specific)
- Core data usage labels: The page says you can assign custom or core data usage labels, and links to Adobe Experience Platform documentation for more information on core data usage labels (product-specific)
Guardrails:
- Creating labels requires the Manage usage labels permission (prerequisite)
- Assigning labels requires belonging to a role with a Manage permission, i.e., Manage journeys, Manage Campaigns, or Manage decisions; without it, the Manage access button is greyed out (prerequisite)
- Supported objects for OLAC labels: Journey, Campaign, Template, Fragment, Landing page, Offer, Static offer collection, Offer decision, Channel configuration, IP warmup plan
Terminology:
- Canonical name: Object level access control — Acronym: OLAC
- Do not confuse: “core data usage labels” ≠ “custom labels” (the page names both as labels you can select to manage access to an object)
FAQ:
- Q: Can I create a label directly in Journey Optimizer without going to the Permissions product? — Yes; the page states you can also create Labels directly in Journey Optimizer: from an Adobe Journey Optimizer object, such as a newly created Campaign, click the Manage access button, then click Create label.
- Q: Which object types support OLAC labels? — Journey, Campaign, Template, Fragment, Landing page, Offer, Static offer collection, Offer decision, Channel configuration, and IP warmup plan.
- Q: What permission is needed to assign a label to a journey? — A role with a Manage permission, i.e., Manage journeys, Manage Campaigns, or Manage decisions; without this permission, the Manage access button is greyed out.
- Q: If a user has only the C1 label in their role, which objects can they access? — Only C1-labeled or unlabeled objects.