Configuring on-line marketing permissions

You can control access to on-line marketing features through:

The system only allows users to perform on-line marketing actions if they belong to roles with permissions for individual on-line marketing modules.

Create on-line marketing roles for your website.
Configure the permissions of the roles.
Assign individual users to the appropriate roles.

You can configure module permissions for roles in the Permissions application.

Configuring permissions for the On-line marketing module

On-line marketing

You can set the following permissions for the On-line marketing module.

Permission	Description
Read	Allows members of the selected roles to view data in the On-line marketing category applications.
Manage	Allows members of the selected roles to manage the data in the On-line marketing category applications.

Web analytics

Configure the permissions for Web analytics (including conversion and campaign management) through the Web analytics module.

Permission	Description
Read	Allows members of the selected roles to view web analytics reports in the Web analytics application. Users also need the Read permission to access the analytics reports anywhere else in the UI, for example in Pages -> Reports.
Save reports	Allows members of the selected roles to save web analytics reports. The saved reports can be viewed in the Reporting application.
Manage data	Allows members of the selected roles to manage the data logged for various statistics (i.e. delete or generate sample data for statistics).
Manage campaigns	Allows members of the selected roles to create and delete campaign tracking objects and edit their properties, including goals.
Manage conversions	Allows members of the selected roles to create, edit and delete conversions.

Contact management

You can configure four basic types of permissions for the Contact management module.

Permission	Description
Read	Allows members of the selected roles to access the corresponding part of the on‑line marketing interface and view any data there.
Read global	Allows members of the selected roles to view global objects of the given type. Note: Global data is only available if the website’s settings allow global data (configure in Settings -> On‑line marketing -> Contact management -> Global data & merging).
Modify	Allows members of the selected roles to create, edit or delete objects of the given type.
Modify global	Allows members of the selected roles to create, edit or delete global objects of the given type.

The permissions are available for the following contact management objects:

Contacts - allow users to view or manage contacts and their settings.
Accounts - allow users to view and manage accounts.
Contact groups - allow users to view and management contact groups.
Configuration - allow users to view and manage account statuses, contact statuses and contact roles.
Activities - allow users to view or manage the activity log. There are no global permissions for activities, since the system always logs activities for a specific site.

Note: Only users with the Global administrator privilege level may configure Read global and Modify global type permissions.

Scoring

Configure the permissions for Contact scoring through the Scoring module.

Permission	Description
Read	Allows members of the selected roles to view the settings of scores and their rules, as well as the score points of individual contacts.
Manage	Allows members of the selected roles to create, edit and delete scores and their rules. Also authorizes users to recalculate scores.

Email marketing

Configure permissions for Email marketing actions through the Email marketing module.

Permission	Description
Read	Allows members of the selected roles to view all data in the Email marketing application interface.
Destroy	Allows members of the selected roles to delete the version history of email campaign objects.
Configure email campaigns	Allows members of the selected roles to configure the settings of all email campaigns on the site.
Author campaign emails	Allows members of the selected roles to create and edit emails within email campaigns.
Manage subscribers	Allows members of the selected roles to add and remove email campaign subscribers.
Manage templates	Allows members of the selected roles to create, edit and delete email campaign templates.

Subscribing contact groups to email campaigns

Note: Users need the Read contact groups permission for the Contact management module to be able to subscribe contact groups to email campaigns.

Marketing automation

Configure permissions for Marketing automation through the On-line marketing module.

Permission	Description
Manage	Allows members of the selected roles to: Create, configure, and delete automation processes Design the steps of automation processes Move contacts within any process to the previous and next step (regardless of step security settings)
Start process	Allows members of the selected roles to start automation processes for contacts and contact groups.
Remove process	Allows members of the selected roles to cancel instances of automation processes running for contacts.
Move to specific step	Allows members of the selected roles to move contacts to any step within automation processes (regardless of step security settings).

Note: Users need the Read contacts permission for the Contact management module to be able to view and manage instances of automation processes running for contacts.

A/B and MVT testing

Configure permissions for optimization testing through the A/B testing and MVT testing modules.

Read

Allows members of the selected roles to view all parts of the A/B or MVT testing management interface and the corresponding reports.

Manage

Allows members of the selected roles to:

Create, edit, and delete tests
Manage test variants (page variants for A/B tests; web part, zone and widget variants for MVT tests)

Note: For websites that use both MVT testing and workflows, define editor roles without the MVT testing -> Manage permission if you wish to strictly enforce the workflow publishing process. Variants of editor widgets are not included by workflow scopes, so even unapproved changes can be directly visible on the live website.

Editing A/B testing page variants:

Because every A/B testing page variant is represented by a pagein the content tree, the standard page permissions apply. The system checks all permissions configured for the Content module (creating, modifying and deleting pages).
Users need the Design web site permission for the Design module to edit page variants on the Design tab of the Pages application.

Managing MVT object variants:

Users need the Design web site permission for the Design module to manage the variants of web parts and zones on the Design tab of the Pages application.
To work with variants of editor widgets on the Pages application Page tab, the Modify permission for the Content module is required. The security settings of specific widgets also apply.

Note: Users need permissions for the Web analytics module to be able to access A/B and MVT testing reports.

Content personalization

Configure permissions for Content personalization through the Content personalization module.

Read

Allows members of the selected roles to view the following in the Pages application administration interface:

The content of personalization variants
The properties of personalization variants
Variant lists

No special permissions are required to view personalized content on the live site.

Manage

Allows members of the selected roles to create, edit and delete personalization variants of objects.

Note: For websites that use both content personalization and workflow, define editor roles without the Content personalization -> Manage permission if you wish to strictly enforce the workflow publishing process. Personalization variants of editor widgets are not included within the scope of workflow, so changes can have an immediate effect on the live website.

Note

Users need the Design web site permission for the Design module to manage the variants of web parts and zones on the Design tab of the Pages application.

To work with variants of editor widgets on the Pages application Page tab, the Modify permission for the Content module is required. The security settings of specific widgets also apply.

Personas

Configure permissions Personas through the Personas module.

Read

Allows members of the selected roles to view the content of the Personas application.

To view the content of personalization variants, members of the selected roles need Content personalization permissions.

No special permissions are required to view personalized content on the live site.

Modify

Allows members of the selected roles to create, edit and delete personas in the Personas application.

Note that to be able to tag pages with personas in the Page application, members of the selected roles need the the Browse tree, Readand Modify Content permissions.

Note

Users need the Design web site permission for the Design module to manage the variants of web parts and zones on the Design tab of the Pages application.

To work with variants of editor widgets on the Pages application Page tab, the Modify permission for the Content module is required. The security settings of specific widgets also apply.