10.1 Admin Overview
What Can Admins Do?
Accessing Admin
- Click Admin in the sidebar
- Select Users & Roles
Admin Permissions Required
You need admin-level permissions (IAM_USER_VIEW, IAM_ROLE_VIEW, etc.) to access these features.10.2 Users
User List
View all users with Console access:Adding Users
Step 1: Click + Add User Step 2: Enter user details:- Name
- Email address
- Select from available roles
- User inherits role permissions
- User receives email invitation
- They set up their password
Editing Users
- Click user in the list
- Modify details:
- Name
- Role assignment
- Save changes
Removing Users
- Select user
- Click Remove/Deactivate
- Confirm action
- User loses Console access
User Status
10.3 Roles
What are Roles?
Roles are collections of permissions that define what users can do in Console.Standard Roles
Most organizations have these default roles:Viewing Roles
- Go to Admin > Users & Roles
- Switch to Roles tab
- See all configured roles
Role Details
Each role shows:- Role name
- Description
- Assigned permissions
- Number of users with this role
Creating Custom Roles
If you have permission:- Click + Create Role
- Enter role name and description
- Select permissions
- Save role
Editing Roles
- Select role
- Modify permissions
- Save changes
- Changes affect all users with this role
10.4 Permissions
Permission Categories
Common Permissions
Treatment Permissions:
Journey Permissions:
Analytics Permissions:
Other Permissions:
Permission Inheritance
Users inherit all permissions from their assigned role. Multiple role assignments combine permissions.10.5 Access Management Best Practices
Principle of Least Privilege
Grant only the permissions needed for each role:- Viewers don’t need edit access
- Editors don’t need admin access
- Analysts don’t need configuration access
Role-Based Access
Recommended Structure:Regular Access Reviews
Periodically review access:- Remove departed employees
- Adjust roles for changed responsibilities
- Audit who has admin access
Documentation
Maintain records of:- Who has access
- Why they have access
- When access was granted
10.6 User Lifecycle
Onboarding New Users
Checklist:- Determine appropriate role
- Create user account
- Send invitation
- User accepts and sets password
- Verify access works
- Provide training/documentation
Role Changes
When responsibilities change:- Review current vs. needed permissions
- Assign new role or modify current
- Communicate change to user
- Verify new access works
Offboarding Users
When someone leaves:- Immediately deactivate account
- Document removal date/reason
- Review any content they created
- Consider data retention needs
10.7 Security Considerations
Password Requirements
Users should:- Use strong, unique passwords
- Enable multi-factor authentication (if available)
- Not share login credentials
Session Security
- Sessions expire after inactivity
- Log out when finished
- Don’t use shared computers for Console
Audit Trail
Admin actions are logged:- User additions/removals
- Role changes
- Permission modifications
10.8 Troubleshooting Access Issues
”User Can’t Log In”
Check:- User status is Active
- Email address is correct
- Password reset if needed
- Account not locked
”User Can’t See Feature”
Check:- User’s role includes required permission
- Permission is correctly configured
- Feature is available in their project
”Permission Not Working”
Check:- Permission is in user’s role
- Role is assigned to user
- Changes have been saved
- User has refreshed/re-logged
”Can’t Add User”
Check:- You have IAM_USER_EDIT permission
- User doesn’t already exist
- Email format is valid
10.9 Admin FAQ
How many admins should we have?
- At least 2 (backup for availability)
- Not too many (security risk)
- Recommendation: 2-3 per organization
Can users have multiple roles?
Configuration varies by organization. Ask your system administrator.How do I know who has access?
Admin > Users & Roles shows all users and their roles. Export for reporting if needed.What happens when I remove a user?
- Immediate loss of access
- Historical data preserved
- Content they created remains
Can I restore a removed user?
Typically yes, by reactivating their account. Verify with your admin.10.10 Requesting Access
For Users Needing Access
- Contact your Console admin
- Explain what you need to do
- Request appropriate role
- Complete any required training