---
title: Configuring on-line marketing permissions
related:
- https://docs.kentico.com/13/managing-users/configuring-permissions.md
- https://docs.kentico.com/13/managing-users/ui-personalization.md
- https://docs.kentico.com/13/securing-websites.md
---
> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).
You can control access to on-line marketing features through:
- [Permissions](https://docs.kentico.com/13/managing-users/configuring-permissions.md)
- [UI personalization](https://docs.kentico.com/13/managing-users/ui-personalization.md)
The system only allows users to perform on-line marketing actions if they belong to roles with permissions for individual on-line marketing modules.
1. Create global on-line marketing roles.
2. Configure the permissions of the global roles.
3. Assign individual users to the appropriate roles.
You can configure module permissions for roles in the **Permissions** application.
## On-line marketing
You can set the following permissions for the **On-line marketing** module.
| Permission | Description |
| ---------- | ------------------------------------------------------------------------------------------------------------------ |
| Read | Allows members of the selected roles to view data in some of the _On-line marketing_ application categories. |
| Manage | Allows members of the selected roles to manage the data in some of the _On-line marketing_ application categories. |
Parts of the system where these permissions apply (along with their UI):
- _Marketing overview_ application
- Activities
- _Contact management_ application -> editing a contact -> _Activities_ tab
- _Contact management_ application -> _Activity_ _log_ tab
- _Contact management_ application -> _Configuration_ -> _Macro rules_ tab
> **Note:** **Note**
>
> The **Contact management ->** **Configuration -> Activity types** tab is accessible only to users with the global administrator [privilege level](https://docs.kentico.com/13/managing-users/user-management.md).
> **Info:** To access these applications and tabs, you also need the **Read** and **Read configuration** [Contact management permissions](#contact-management).
- Parts of marketing automation
- _Contact management_ application -> editing a contact -> _Processes_ tab
> **Info:** To access this application and tab, you also need the **Read** [Contact management permission](#contact-management) and the **Read processes** [Marketing automation permission](#marketing-automation).
- Parts of contact management
- _Contact management_ application -> _Pending contacts_ tab
- _My pending contacts_ application
> **Info:** To access these applications and tabs, you also need the **Read** [Contact management permission](#contact-management).
## Activities
Configure the permissions for [activity log](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/tracking-contact-activities.md) through the **Activities** module.
| Permission | Description |
| ----------------- | -------------------------------------------------------------------------------------- |
| Read activities | Allows members of the selected roles to view activities in the activity log. |
| Modify activities | Allows members of the selected roles to edit or delete activities in the activity log. |
## Contact management
You can configure four basic types of permissions for the **Contact management** module.
| Permission | Description |
| -------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Read | Allows members of the selected roles to view [contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md), [contact groups](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/segmenting-contacts-into-contact-groups.md), and [contact accounts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/organizing-contacts-into-accounts.md). |
| Modify | Allows members of the selected roles to create, edit and delete contacts, contact groups, and contact accounts. |
| Read configuration | Allows members of the selected roles to view [account statuses](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/organizing-contacts-into-accounts.md#assigning-statuses-to-accounts), [contact statuses](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/assigning-statuses-to-contacts.md), and [contact roles](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts/organizing-contacts-into-accounts.md). |
| Modify configuration | Allows members of the selected roles to create, edit and delete account statuses, contact statuses, and contact roles. |
## Scoring
Configure the permissions for [Contact scoring](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/scoring-contacts.md) through the **Scoring** module.
| Permission | Description |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| Read | Allows members of the selected roles to view the settings of scores and their rules, as well as the score points of individual contacts. |
| Manage | Allows members of the selected roles to create, edit and delete scores and their rules. Also authorizes users to recalculate scores. |
## Content personalization
Configure the permissions for [Content personalization](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personalizing-widgets.md) through the **Content personalization** module.
| Permission | Description |
| ---------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Read | Allows members of the selected roles to view the following in the **Pages** application administration interface:
The properties of widget personalization variants
Variant lists
No permissions are required to view personalized content on the live site. |
| Manage | Allows members of the selected roles to create, edit and delete personalization variants of widgets. |
## Email marketing
Configure the permissions for [Email marketing](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/email-marketing.md) actions through the **Email marketing** module.
| Permission | Description |
| ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Read | Allows members of the selected roles to view all data in the _Email marketing_ application interface. |
| Destroy | Allows members of the selected roles to delete the version history of newsletter and email campaign objects. |
| Configure email feeds | Allows members of the selected roles to configure the settings of all newsletters and email campaigns on the site. |
| Author marketing emails | Allows members of the selected roles to create and edit marketing emails within newsletters and email campaigns. |
| Manage recipients | Allows members of the selected roles to add and remove email feed recipients ([contacts](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/working-with-contacts.md) and [contact groups](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/contact-management/segmenting-contacts-into-contact-groups.md)). |
| Manage templates and widgets | Allows members of the selected roles to create, edit and delete email feed templates and widgets. |
## Marketing automation
Configure the permissions for [Marketing automation](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/marketing-automation.md) through the **On-line marketing** module.
| Permission | Description |
| --------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Read processes | Allows members of the selected roles to view automation processes. |
| Manage processes | Allows members of the selected roles to:
Create, configure and delete automation processes
Design the steps of automation processes
Create and configure triggers for automation processes
Move contacts within any process to the previous and next step (regardless of step security settings)
**Important**: Automation processes run within a global context in certain scenarios. To allow moving of contacts from steps in all cases, you need to assign the permission via a **Global** role. |
| Start process | Allows members of the selected roles to start automation processes for contacts and contact groups. |
| Remove process | Allows members of the selected roles to cancel instances of automation processes running for contacts. |
| Move to specific step | Allows members of the selected roles to move contacts to any step within automation processes (regardless of step security settings).
**Important**: Automation processes run within a global context in certain scenarios. To allow moving of contacts from steps in all cases, you need to assign the permission via a **Global** role. |
| Manage automation templates | Allows members of the selected roles to:
Save existing automation processes as templates
Edit and delete automation process templates |
> **Note:** **Note**: Users need the **Read** permission for the **Contact management** module to be able to view and manage instances of automation processes running for contacts.
## A/B testing
Configure the permissions for [A/B testing](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/a-b-testing-pages.md) through the **A/B testing** module.
| Permission | Description |
| ---------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| Read | Allows members of the selected roles to view all parts of the A/B testing interface and the corresponding reports. |
| Manage | Allows members of the selected roles to:
Create, edit and delete A/B tests
Create, edit and delete page variants for A/B tests |
> **Note:** **Note**: A/B testing page variants are created and managed on the _Page_ tab in the **Pages** application. Users require the standard page permissions to view and edit the related pages (see [Configuring page permissions](https://docs.kentico.com/13/managing-users/configuring-permissions/configuring-page-permissions.md)).
## Campaigns
Configure permissions for [Campaign](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/campaigns.md) management through the **Web analytics** module.
| Permission | Description |
| ---------------- | -------------------------------------------------------------------------- |
| Manage campaigns | Allows members of the selected roles to create, edit and delete campaigns. |
## Personas
Configure the permissions for [Personas](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/personas.md) through the **Personas** module.
| Permission | Description |
| ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Read | Allows members of the selected roles to view the content of the **Personas** application.
To view the content of personalization variants, members of the selected roles need [Content personalization](#content-personalization) permissions.
No special permissions are required to view personalized content on the live site. |
| Modify | Allows members of the selected roles to create, edit and delete personas in the **Personas** application.
**Note** that to be able to tag pages with personas in the **Pages** application, members of the selected roles need the **Browse tree**, **Read**and **ModifyContent** [permissions](https://docs.kentico.com/13/managing-users/configuring-permissions/configuring-page-permissions/permissions-for-all-content.md). |
## Web analytics
Configure the permissions for [Web analytics](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/web-analytics.md) through the **Web analytics** module.
| Permission | Description |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Read | Allows members of the selected roles to view web analytics reports in the _Web analytics_ application. |
| Save reports | Allows members of the selected roles to save web analytics reports. The saved reports can be viewed in the _Reporting_ application. |
| Manage campaigns | Allows members of the selected roles to create, edit and delete [campaigns](https://docs.kentico.com/13/on-line-marketing-features/managing-your-on-line-marketing-features/campaigns.md). |