Given a customer scenario, recommend the appropriate Marketing Cloud role based on User Stories.
Marketing Cloud roles define permissions which allow or deny users access to Marketing Cloud features. There are a number of standard roles with predefined access permissions, and additional roles with custom permissions can be created.
Marketing Cloud provides a number of standard roles for common use cases. Standard roles consist of predefined permissions which allow or deny access to Marketing Cloud features. Those predefined access permission can be modified by Marketing Cloud administrators, if needed.
Marketing Cloud differentiates between Classic and Marketing Cloud standard roles.
Classic standard roles are legacy roles from ExactTarget. They focus on email marketing use cases, and define access permissions for the Marketing Cloud Email Studio application.
|Administrator||Account management functions and access to create, edit, delete, and share any data within the account.|
|Content Creator||Content management functions but no access to subscriber data, tracking information, and send emails.|
|Data Manager||Subscriber and account data including subscriber lists, data extensions, and import and export features.|
|Analyst||Access tracking and reporting data.|
|Distributed Sending User||Access distributed sending solution.|
Marketing Cloud standard roles are newer and can focus on cross-channel marketing use cases. They define access permissions for all Marketing Cloud applications, including Email Studio.
|Marketing Cloud Administrator||Assign roles to users and to manages channels, apps, and tools.|
|Marketing Cloud Viewer||View cross-channel marketing activities.|
|Marketing Cloud Channel Manager||Create and execute cross-channel marketing campaigns and administer specific channels.|
|Marketing Cloud Security Administrator||Maintain security settings and manage user activity and alerts.|
|Marketing Cloud Content Editor/Publisher||Create and deliver messages through channel apps.|
In addition to standard roles, custom roles can be created by Marketing Cloud administrators.
A standard or custom role can be assigned to multiple Marketing Cloud users, and a user can be assigned to multiple roles. In addition, custom permissions can be modified for each user individually.
A user's access permission is therefore defined with:
One user can be assigned to multiple standard or custom roles. The access level to a feature results from the combination of all assigned roles.
For each user, additional permissions can defined. The access level to a feature results from the combination of all assigned roles, and the additional permission defined on user-level.
If access to a features is defined in both role and additional permission, then deny permissions overrides allow permissions. For example, if an role defines deny for exporting reports, but a user permission allows this features, then the deny will override the allow permission.