Permissions & Access

From the moment you give access to more people on your platform, user roles will have crucial importance. Understanding what user roles exist and what permissions you can grant them will help you organize your system better and make sure that no one has more or fewer rights than they should.

From the Settings tab, select Users and Roles to manage the team that needs access to a ZMP Account, as well as those that require access to parent accounts and/or child accounts.

Managing Teammates

Teammates can be managed from within the Teammates tab. Here, a list of users is displayed along with their:

Name
Primary Account
Role
Email Address, and
Status.

Hover over a user's row and click the action menu (...) on the extreme right to reveal options to edit, deactivate, and/or permanently remove the user.

Adding a New Teammate

To invite a new team member, click on the Invite Teammates button in the top-right corner.

As the Invite teammates panel slides in from the right side of the window,

Set the fields for First Name, Last Name, Email Address, and Display Name (optional).
The Primary Account is the top-level account the user should log in to when accessing the platform.
Setting the Role gives the user certain permissions.

Once a user is invited, they will appear as pending in the list of users with access to the account. An invitation email is sent to the user as well. This invitation email has a link the user can click to set their password.

Managing Roles

The Roles tab displays all the available roles, their descriptions, the account it's in, and the number of users with that role.

Clicking on a role reveals options to edit that role, including what permissions are enabled for it.

For accounts with a parent/child structure in place, users can be invited to the parent account and be given different levels of access to the child accounts all from the parent account. These are referred to as secondary accounts.

The Acquisition View of an account can only be seen by users that have the role of Acquisition User. This role can be set for you by Zeta Global.

Adding a New Role

To add in a new role, click on the New Role button in the top-right corner.

As the Add new Role panel slides in from the right side of the window,

Fill in the Name and Description for the role and choose an account the role can be used in
Set the Role Permissions.

The default role selection toggle allows you to set the default role of a new ZMP user account being created.

Role Permissions

Permission Name	Description	Dependent Permissions
Campaigns Permissions
View Campaigns	Grants the ability to view campaigns and their details	None
Edit Campaigns	Grants the ability to edit campaigns	View Campaigns
Launch Campaigns	Grants the ability to launch campaigns	View Campaigns Edit Campaigns
Edit Transactional Campaign	Grants the ability to mark a campaign as transactional and modify it. Transactional campaigns ignore the subscription status of the audience upon deployment.	View Campaigns Edit Campaigns
Edit Campaign Content	Grants the ability to edit content specifically within campaigns	View Campaign Edit Campaign
Lock Campaign Content	Grants the ability to lock individual rows and modules within the Visual Editor	Edit Campaign Content
Preview Dynamic Content	Grants the ability to preview dynamic content. This can display PII depending on what dynamic elements are contained within content.	None
Experiences Permissions
View Experiences	Grants the ability to view Experiences in the UI	None
Edit Experiences	Grants the ability to edit experiences	View Experiences View Campaign Edit Campaign
Launch Experiences	Grants the ability to set an experience to active	View Campaign Edit Campaign Edit Experience
Edit Experience Templates	Grants the ability to edit templates used for creating experiences	View campaign Edit campaign View experiences Edit experience
View Events	Grants the ability to view event details in the UI	None
Events Exports	Grants the ability to export event data	View Events
Content Permissions
View Content	Grants the ability to view content not contained within a campaign	None
Edit Content	Grants the ability to edit content not contained within a campaign	View Content
Edit Feeds	Grants the ability to create and modify feeds	None
Replace Media Asset	Grants the ability to update or swap an existing media asset with a new one	View content Edit content
Ignore Selective Access	Grants the ability to bypass selective access controls and view all items regardless of assigned restrictions	None
Audiences Permissions
View Audiences	Grants the ability to view the Audiences section in the left nav.	None
Edit Audience	Grants the ability to create and edit segments and lists	View Audiences
View Customer Data	Grants the ability to view customer profile data associated with audience segments	None
Edit Customer Data	Grants the ability to update or modify customer profile data	View customer data
Export Data	Grants the ability to export audience or customer data to external systems or files	View audiences
Download Data	Grants the ability to download audience or customer data locally for offline access	View audiences
View Customer PII	Grants the ability to view personally identifiable information (PII) within customer records	None
Edit Customer Subscriptions	Grants the ability to update or manage customer communication preferences and subscription statuses	View customer data
View Identity Manager	Grants the ability to access and view identity resolution data in the Identity Manager	None
Edit Identity Manager	Grants the ability to make changes to identity resolution rules or merged profiles in the Identity Manager	View identity manager
External DB Access	Grants the ability to access and query connected external databases for creating query-based segments. Requires an initial account-level setup to establish a connection to an external database This can have cost implications for the database owner.	None
Edit Contacts	Grants the ability to add, edit, or delete contacts from within a profile	View Customer PII
Data Permissions
View Data Flows	Grants the ability to view data flows.	None
Edit Data Flows	Grants the ability to create and modify data flows	View Data Flows
Edit Custom Data Flows	Grants the ability to create and modify custom data flows	Edit Data Flows
View Files	Grants the ability to view row items of imported or exported files	None
Edit Files	Grants the ability to view row items of imported or exported files	View Files
Data Flows Approver	Grants the ability to approve data flow that was copied in an account from another account	Edit Data Flows View Data Flows
Clean Room Sender	Grants the ability to create, edit, or delete a Clean Room data flow	None
Clean Room Receiver	Grants the ability to use Clean Room events in Audiences	Edit Audience
Dashboard Permissions
View Dashboard	Grants the ability to view the Acquisition dashboard	None
Opportunities Permissions
View Opportunities	Grants the ability to view the Opportunities dashboard	None
View Actions	Grants the ability to view Actions	View Opportunities
Analytics Permissions
View Analytics	Grants the ability to view analytics and reporting	None
Edit Analytics	Grants the ability to edit reports	View Analytics
View Embedded Reports	Grants the ability to access and view embedded analytics reports within Insights Studio
Edit Embedded Reports	Grants the ability to modify the configuration and content of embedded reports	View Embedded Reports
Edit Report Email	Grants the ability to configure and update scheduled report emails, including recipients and frequency	View Analytics
DSP View AAd	This permission controls advanced Media Activation metrics. By default, the permission is disabled for everyone, meaning that the metrics will not be visible. If the new permission is enabled, the user it is enabled for will be able to see everything. It can be turned off by request on a case-by-case basis.	None
Account Settings Permissions
Edit Account Settings	Grants the ability to modify all account settings	View Account Settings
View Account Settings	Grants the ability to view all configuration options in the account settings section	None
Manage Integrations	Grants the ability to configure and maintain third-party integrations connected to the account	Edit Account Settings
Manage Properties	Grants the ability to view and update properties such as domains, tags, or other account-linked attributes	Edit Account Settings
Manage User Access	Grants the ability to add new users, deactivate existing users, create roles, modify roles, and assign roles	Edit Account Settings
Delete User	Grants the ability to permanently remove user accounts from the system	None
View Configured Tables	Grants the ability to view data tables that have been configured within the platform	None
Edit Configured Tables	Grants the ability to modify the structure or content of configured data tables	None
Manage Message Providers	Grants the ability to configure and update messaging service providers used for campaign delivery	None
Edit Notification Recipients	Grants the ability to manage and update users or groups who receive system or campaign notifications	None
Onboarding
Onboarding Workflow Client	Grants access to view onboarding plans	None
Onboarding Workflow API Actions	Grants the ability to add or edit Onboarding Plans	None

Special System User Permissions

Role	Platform Feature	Associated Permissions
Super User	Dashboard	View Dashboard
	Opportunities	View Opportunities View Actions
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Edit Campaign Content Lock Campaign Content Edit Transactional Campaign Preview Dynamic Content
	Experiences	View Experiences Edit Experiences Launch Experiences Edit Experience Templates View Events Events Exports
	Audiences	View Audiences Edit Audiences View Customer Data Edit Customer Data Export Data Download Data View Customer PII Edit Customer Subscriptions View Identity Manager Edit Identity Manager External DB Access Edit Contacts
	Data	View Data Flows Edit Data Flows Data Flows Approver View Files Edit Files View Data Mappings Edit Custom Data Flows Edit Data Mappings Clean Room Sender Clean Room Receiver
	Content	View Content Edit Content Edit Feeds Replace Media Asset
	Analytics	View Analytics Edit Analytics View Embedded Reports Edit Embedded Reports Edit Report Email
	Settings	Edit Account Settings View Account Settings Manage Integrations Manage Properties Manage User Access Delete User View Configured Tables Edit Configured Tables Manage Message Providers Edit Notification Recipients
	Onboardings	Onboarding Workflow Client Onboarding Workflow API Actions
Campaign Manager	Dashboard	View Dashboard
	Opportunities	View Opportunities
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Edit Campaign Content Lock Campaign Content
	Experiences	View Experiences Edit Experiences Launch Experiences View Events Events Exports
	Audiences	View Audiences Edit Audiences Export Data View Identity Manager
	Data	View Files Edit Files Clean Room Receiver
	Content	View Content Edit Content Edit Feeds
	Analytics	View Analytics Edit Analytics View Embedded Reports Edit Embedded Reports Edit Report Email
	Onboarding	Onboarding Workflow Client
Team Member	Dashboard	View Dashboard
	Opportunities	View Opportunities
	Experiences	View Experiences View Events
	Audiences	View Audiences
	Data	View Files
	Content	View Content
	Analytics	View Analytics Edit Analytics View Embedded Reports Edit Embedded Reports Edit Report Email
	Onboarding	Onboarding Workflow Client
Acquisition User	Opportunities	View Opportunities View Actions
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Preview Dynamic Content
	Experiences	View Experiences View Events
	Audiences	View Audiences Edit Audiences Export Data
	Data	View Files Edit Files Clean Room Receiver
	Content	View Content
	Analytics	View Analytics Edit Analytics View Embedded Reports Edit Embedded Reports Edit Report Email
	Settings	Edit Account Settings View Account Settings Manage Integrations Manage Properties Manage User Access
	Onboarding	Onboarding Workflow Client
Account Administrator	Dashboard	View Dashboard
	Opportunities	View Opportunities View Actions
	Campaigns	View Campaigns Edit Campaigns Launch Campaigns Edit Campaign Content Lock Campaign Content Preview Dynamic Content
	Experiences	View Experiences Edit Experiences Launch Experiences View Events
	Audiences	View Audiences Edit Audiences View Customer Data Edit Customer Data Export Data View Customer PII Edit Customer Subscriptions View Identity Manager Edit Identity Manager External DB Access
	Data	View Files Edit Files Clean Room Sender Clean Room Receiver
	Content	View Content Edit Content Edit Feeds Replace Media Asset
	Analytics	View Analytics Edit Analytics View Embedded Reports Edit Embedded Reports Edit Report Email
	Settings	Edit Account Settings View Account Settings Manage Integrations Manage Properties Delete User View Configured Tables Edit Configured Tables Edit Notification Recipients
	Onboardings	Onboarding Workflow Client Onboarding Workflow API Actions

Custom User Roles

Some custom roles such as that of an Agency Creative, DB Access Role, or Reporting User can check their custom permissions by navigating to Settings > Teams & Roles > Roles and then clicking on the given role to display its associated permissions.

Selective Access

Selective Access is an optional feature in the ZMP that limits the visibility of Experiences, Campaigns, Templates, and Snippets. With Selective Access permission enabled, access to newly created Experiences, Campaigns, Templates, and Snippets is limited to the person that created them in the first place.

Once a new item is created, the owner of that item can share access to that item with other individuals in the account.

For those who should have access to all items regardless of owner, an Ignore Selective Access permission can be enabled for their role, which will ultimately ignore the ownership and visibility limits introduced by enabling Selective Access.

Teams

Teams allow for the creation of groups of users in ZMP to make sharing items in an account with Selective Access enabled easier. With teams, a newly created item can be shared with a team rather than with each individual user who needs access.