Selective Permissions, Selective Access

From the moment you give access to more people on your platform, user roles will have crucial importance. Understanding what user roles exist and what permissions you can grant them will help you organize your system better and make sure that no one has more or fewer rights than they should.

From the Settings tab, select Users and Roles to manage the team that needs access to a ZMP Account, as well as those that require access to parent accounts and/or child accounts.

Managing Teammates

Teammates can be managed from within the Teammates tab. Here, a list of users is displayed along with their:

Name
Primary Account
Role
Email Address, and
Status.

Hover over a user's row and click the action menu (...) on the extreme right to reveal options to edit, deactivate, and/or permanently remove the user.

Adding a New Teammate

To invite a new team member, click on the Invite Teammates button in the top-right corner.

As the Invite teammates panel slides in from the right side of the window,

Set the fields for First Name, Last Name, Email Address, and Display Name (optional).
The Primary Account is the top-level account the user should log in to when accessing the platform.
Setting the Role gives the user certain permissions.

Once a user is invited, they will appear as pending in the list of users with access to the account. An invitation email is sent to the user as well. This invitation email has a link the user can click to set their password.

Managing Roles

The Roles tab displays all the available roles, their descriptions, the account it's in, and the number of users with that role.

Clicking on a role reveals options to edit that role, including what permissions are enabled for it.

For accounts with a parent/child structure in place, users can be invited to the parent account and be given different levels of access to the child accounts all from the parent account. These are referred to as secondary accounts.

The Acquisition View of an account can only be seen by users that have the role of Acquisition User. This role can be set for you by Zeta Global.

Adding a New Role

To add in a new role, click on the New Role button in the top-right corner.

As the Add new Role panel slides in from the right side of the window,

Fill in the Name and Description for the role and choose an account the role can be used in
Set the Role Permissions.

The default role selection toggle allows you to set the default role of a new ZMP user account being created.

Role Permissions

Permission Name	Description	Dependent Permissions
Campaign Permissions
View Campaign	Grants the ability to view campaigns and their details	None
Edit Campaign	Grants the ability to edit campaigns	View Campaign
Launch Campaign	Grants the ability to launch campaigns	View Campaign Edit Campaign
Edit Transaction Campaign	Grants the ability to mark a campaign as transactional and modify it. Transactional campaigns ignore subscription status of the audience upon deployment.	View Campaign Edit Campaign
Experience Permissions
View Experiences	Grants the ability to view Experiences in the UI	None
Edit Experience	Grants the ability to edit experiences	View Experiences View Campaign Edit Campaign
Launch Experience	Grants the ability to set an experience to active	View Campaign Edit Campaign Edit Experience
Content Permissions
View Content	Grants the ability to view content not contained within a campaign	None
Edit Content	Grants the ability to edit content not contained within a campaign	View Content
Edit Campaign Content	Grants the ability to edit content specifically within campaigns	View Campaign Edit Campaign
Lock Campaign Content	Grants the ability to lock individual rows and modules within the Visual Editor	Edit Campaign Content
User Preview Dynamic Content	Grants the ability to preview dynamic content. This can display PII depending on what dynamic elements are contained within content.	None
Edit Feeds	Grants the ability to create and modify feeds	None
Audience Permissions
View Audiences	Grants the ability to view the Audiences section in the left nav.	None
Edit Audience	Grants the ability to create and edit segments and lists	View Audiences
Edit Contacts	Grants the ability to add, edit, or delete contacts from within a profile	View Customer PII
Data Permissions
View Data Flows	Grants the ability to view data flows.	None
Edit Data Flows	Grants the ability to create and modify data flows	View Data Flows
Edit Custom Data Flows	Grants the ability to create and modify custom data flows	Edit Data Flows
View Files	Grants the ability view row items of imported or exported files	None
Edit Files	Grants the ability to view row items of imported or exported files	View Files
View Data Mappings	Grants the ability to view data mappings	None
Edit Data Mappings	Grants the ability to create and modify data mappings	View Data Mappings
Data Flows Approver	Grants the ability to approve data flow that was copied in an account from another account	Edit Data Flows View Data Flows
Clean Room Sender	Grants the ability to create, edit, or delete a Clean Room data flow	None
Clean Room Receiver	Grants the ability to use Clean Room events in Audiences	Edit Audience
Dashboard Permissions
View Opportunities	Grants the ability to view the Opportunities dashboard	None
View Dashboard	Grants the ability to view the Acquisition dashboard	None
View Actions	Grants the ability to view Actions	View Opportunities
Analytics Permissions
View Analytics	Grants the ability to view analytics and reporting	None
Edit Analytics	Grants the ability to edit reports	View Analytics
DSP View Advanced Analytics	This permission controls advanced Media Activation metrics. By default the permission is disabled for everyone, meaning that the metrics will not be visible. If the new permission is enabled, the user it is enabled for will be able to see everything. It can be turned off by request on a case-by-case basis.	None
Account Settings Permissions
Edit Account Settings	Grants the ability to modify all account settings	None
Manage User Access	Grants the ability to add new users, deactivate existing users, create roles, modify roles, and assign roles	Edit Account Settings
External Db Access	Grants the ability to access and query connected external databases for creating query based segments. Requires an initial account-level setup to establish a connection to an external database This can have cost implications for the database owner.	None
Syndicate Content	Grants the ability to syndicate content from a parent account to connected child accounts	None
User Management	Ability to audit changes to users in client account Ability for client to filter managed users list by status	None
Files Permissions
View Files	Grants the ability to view the Data section of the UI	None
Edit Files	Grants the ability to modify data flows and other aspects of the Data section of the UI	View Files
Onboarding
View Onboardings	Grants access to view onboarding plans	None
Edit Onboardings	Grants the ability to add or edit Onboarding Plans	None

Special System User Permissions

Role	Platform Feature	Associated Permissions
Super User	Dashboard	View Dashboard
	Opportunities	View Opportunities View Actions
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Edit Campaign Content Edit Transactional Campaign Preview Dynamic Content
	Experiences	View Experiences Edit Experiences Launch Experiences Edit Experience Templates View Events
	Audiences	View Audiences Edit Audiences View Customer Data Edit Customer Data Export Data Download Data View Customer PII Edit Customer Subscriptions View Identity Manager Edit Identity Manager External DB Access
	Data	View Data Flows Edit Data Flows Data Flows Approver View Files Edit Files View Data Mappings Edit Custom Data Flows Edit Data Mappings Clean Room Sender Clean Room Receiver
	Content	View Content Edit Content Lock Campaign Content Edit Feeds Syndicate Content
	Analytics	View Analytics Edit Analytics View Custom Reports Edit Custom Reports Edit Report Email
	Settings	Edit Account Settings Manage Integrations Manage Properties Manage User Access Delete User
	Onboardings	View Onboardings Edit Onboardings
Campaign Manager	Dashboard	View Dashboard
	Opportunities	View Opportunities
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Edit Campaign Content Preview Dynamic Content
	Experiences	View Experiences Edit Experiences Launch Experiences View Events
	Audiences	View Audiences Edit Audiences Export Data View Identity Manager
	Data	View Files Edit Files Clean Room Receiver
	Content	View Content Edit Content Lock Campaign Content Edit Feeds
	Analytics	View Analytics Edit Analytics View Custom Reports Edit Custom Reports Edit Report Email
	Onboarding	View Onboardings
Team Member	Dashboard	View Dashboard
	Opportunities	View Opportunities
	Experiences	View Experiences View Events
	Audiences	View Audiences
	Data	View Files
	Content	View Content
	Analytics	View Analytics Edit Analytics View Custom Reports Edit Custom Reports Edit Report Email
	Onboarding	View Onboardings
Acquisition User	Opportunities	View Opportunities View Actions
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Preview Dynamic Content
	Experiences	View Experiences View Events
	Audiences	View Audiences Edit Audiences Export Data
	Data	View Files Edit Files Clean Room Receiver
	Content	View Content
	Analytics	View Analytics Edit Analytics View Custom Reports Edit Custom Reports Edit Report Email
	Settings	Edit Account Settings Manage Integrations Manage Properties Manage User Access
	Onboarding	View Onboardings
Account Administrator	Dashboard	View Dashboard
	Opportunities	View Opportunities View Actions
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Edit Campaign Content Edit Transactional Campaign Preview Dynamic Content
	Experiences	View Experiences Edit Experiences Launch Experiences View Events
	Audiences	View Audiences Edit Audiences View Customer Data Edit Customer Data Export Data View Customer PII Edit Customer Subscriptions View Identity Manager Edit Identity Manager External DB Access
	Data	View Files Edit Files View Data Mapping Clean Room Sender Clean Room Receiver
	Content	View Content Edit Content Lock Campaign Content Edit Feeds Syndicate Content
	Analytics	View Analytics Edit Analytics View Custom Reports Edit Custom Reports Edit Report Email
	Settings	Edit Account Settings Manage Integrations Manage Properties Delete User
	Onboardings	View Onboardings Edit Onboardings

Custom User Permissions

Some custom roles such as that of an Agency Creative, DB Access Role, or Reporting User can check their custom permissions by navigating to Settings > Teams & Roles > Roles and then clicking on the given role to display its associated permissions.

Selective Access

Selective Access is an optional feature in the ZMP that limits the visibility of Experiences, Campaigns, Templates, and Snippets. With Selective Access permission enabled, access to newly created Experiences, Campaigns, Templates, and Snippets is limited to the person that created them in the first place.

Once a new item is created, the owner of that item can share access to that item with other individuals in the account.

For those who should have access to all items regardless of owner, an Ignore Selective Access permission can be enabled for their role, which will ultimately ignore the ownership and visibility limits introduced by enabling Selective Access.

Teams

Teams allow for the creation of groups of users in ZMP to make sharing items in an account with Selective Access enabled easier. With teams, a newly created item can be shared with a team rather than with each individual user that needs access.