Roles are created in the Settings folder under Roles.
A role is a collection of rights that can be assigned to a user. A role can contain any rights, and any role can be assigned to a user. This gives you all the freedom you need to map the rights management in the system - regardless of whether you use a few roles with the users' descriptions, such as web designer, editor, etc., or set up very fine-grained roles that focus more on individual functions (such as article management).
Global roles
Global roles can also be assigned to local users. These assignments can only be made by global users who own the role in question.
Create roles
You create a new role in the Settings/Roles folder. This role must then be assigned to a user.
The right to login must be given to each user, otherwise the user cannot log in to the system.
Warning!
You can only assign privileges to a role that you own. All other rights are not displayed. This means that you can take a right from yourself, but you cannot get it back yourself. Therefore you should pay attention to two things: Always retain at least one user with the role of system administrator. All rights are automatically assigned to this role. Only give the role management right to trustworthy persons - especially at the top level. These persons should be trained accordingly with regard to the logic of users, roles and rights.
Overview of rights
The system divides the rights into two groups. On the one hand, there are the rights that are directly linked to functions of the system. On the other hand, there are the rights that are directly bound to individual objects and media. There is a detailed list for all objects, which is identical in the function for each object. Each object has the privileges: Display, manage, create and change.
System rights
In the system rights you set the functions that are directly bound to the system.
The following system rights are available for selection:
System
Login: Every user needs this right to log in to the system. If you want to withdraw the login privilege from a certain group of users for a short period of time, you can easily do this by withdrawing this privilege.
Users and security
Manage users: The user can create, edit and delete users.
Manage roles: The user can create, edit, and delete roles.
Security Policies: The user can create, edit and delete roles: The user is allowed to edit security policies.
View Global Accounting: The user can view billing at a global level.
Profiles
View profile list: The user can view lists of profiles, e.g. for pool or target groups.
Export profiles: The user can export all profiles in the profile list in the current view.
Delete profiles: The user may irretrievably delete individual profiles in the profile list.
Import profiles: The user can request the import into the system from the profile list.
Restore profiles: The user can create and restore backups in the pool.
Display / edit blacklist: Viewing and editing the blacklist.
Export conversions: Defines whether a user is allowed to export conversions.
eMailing
Send eMailing: The user may send an e-mail.
Send e-mail (global level): The user is allowed to send an e-mail on a global level.
Premium services
GeoDB services: The user can display the profiles on a map, house number by house number.
Check Create eMail display: Allow use of the premium display and spam check (additional costs may apply).
Check eMail display: View existing premium display and spamcheck evaluations.
Create Check EyeTracking: Allow use of the EyeTracking service for eMailings and forms (additional costs may apply).
Show Check EyeTracking: View existing EyeTracking evaluations.
Create Check Text Analysis: Allow use of text analysis for emailings and articles (additional costs may apply).
Show Check Text Analysis: View existing text analysis.
Translation: Determines whether a user may use an external translation service.
Scoring
Configure scoring: Determines whether scoring can be configured.
Evaluate Scoring: Determines whether scoring can be evaluated.
Miscellaneous
Service Center Access: Display the Service Center link in the main navigation and access this area of the page.
Manage Appearances: The user can create, edit and delete appearances.
Create folders: Create a new folder in the tree navigation.
Manage folders: Rename and delete a folder in the tree navigation.
Lock and unlock objects: Lock and unlock objects within the system for other employees.
Create object: An object of this type can be newly created by the user.
Manage object: An object can be deleted, copied, and moved by the user.
Block external access: Prohibit display of objects from external access (e.g. website, form, ...).
Form (individual template): Defines whether individual templates may be used in forms.
Editor Configuration: Determines whether a user may adapt the editors in the system.
Client
Create customer/client: Defines whether a user can create clients.
Edit customer/client: Determines whether a user can edit clients.
Create customer/client (demo): Defines whether a user can edit demo clients.
Copy customer/client: Defines whether a user can copy clients
Delete customer/client: Defines whether a user can delete clients
Access to global data: Defines whether a user can access global data
Domain Configuration: Determines whether a user may modify domain configurations.
Interface
Web services: Determines whether a user can use the Web services (SOAP).
Reporting API: Determines whether a user can use the Reporting API.
Web Services 1.0 (deprecated): Determines whether a user can use Web Services 1.0 (XML-RPC calls)
WebDAV
WebDAV: Defines whether a user is allowed to use the WebDAV functionality.
Events
Configure events: Determines whether a user can configure events.
Assign events: Determines whether a user can assign events.
Property rights
With the object rights you can set exactly how an object may be edited. For each object it can be set whether it may be displayed, managed, created or modified.
Display object: The object can be displayed and linked from outside; this right also allows display by unauthorised users.
Manage object: The object can be deleted, copied and moved by the user.
Create object: An object of this type can be newly created by the user.
Change object: The object can be edited and changed by the user (edit and save); without this right the user can only see a preview and detailed view of the object.
The following objects are available for selection:
Section: Automation
Campaigns
Section: Communication
eMailing
eMailing - Acceptance
eMailing - Queue
eMailing - Shipping
eMailing (Event)
eMailing (Trigger)
PrintMailing
eMailing (Split)
eMailing (Split) - Acceptance
eMailing (Split) - Queue
eMailing (Split) - Shipping
Form
Form alias
website
LeadPage
Note
Web hook
Section: Profiles and Analysis
WebTouchPoint
Target group
Inquiry Manager
SmartLink
Report
Pool Data Miner
Persona
Pool
PoolAlias
Report Funnel
Section: Contents
Article
Picture
Dynamic image
QR Code
File
Article export
Article import
Container
Section: Template
eMailing template
Article template (eMail/HTML)
Article Template (Web/HTML)
Article template (PDF/FO)
Article Template (eMail/Text)
All article templates
Article type
Container type
LeadPage template