Roles and Permissions Reference

Assign the Correct Role to Your Users

Marketing Cloud recommends that you assign roles to users that grant them only the required permissions to carry out their jobs. Follow these guidelines when assigning roles.

• Any roles that don't include the phrase Marketing Cloud apply specifically to Email Studio. To access other features in Marketing Cloud, consider adding a Marketing Cloud role to the user.
• Restrict the number of users granted Administrator or Marketing Cloud Administrator roles so that you can maintain the minimum permissions necessary to perform tasks.
• The Marketing Cloud Administrator and Administrator roles allow access to most features. See each feature’s documentation for required permissions.
• A Deny permission in any role or individual user prevents access to that feature, no matter what other roles are specific to that feature.
• 

  Warning Don’t assign all permissions to a user. All permissions assignment creates conflicts and makes features inaccessible.

Individual Permissions

These tables indicate the permission necessary to execute specific actions within Marketing Cloud. They don't represent all permissions necessary to allow a user to access Marketing Cloud or perform other basic tasks. We recommend that all Marketing Cloud users enable these permissions for basic access to Marketing Cloud functionality.

• Salesforce Marketing Cloud | General | Access
• Email | General | Access

Access to data extensions also requires the Salesforce Marketing Cloud | Campaigns | general | Access, in addition to any other data extension permissions you assign to the user.