Use this guide to manage access for users. This includes granting access to users and changing the kinds of permissions they have in Campaign Manager 360.
See this outline of the steps to grant a user access to Campaign Manager 360 and its API.Set up access for a user
Make sure you have admin rights. To grant Campaign Manager 360 access for other users, you need admin rights.
To check if you have admin rights, simply try to create a new user profile: Admin > User profiles > New. If you are unable to create a user profile, you do not have admin rights. Talk to an admin on your account if you need these rights.
Make sure you have an email address for the user who needs access. This must either be a Google Account email address (e.g., firstname.lastname@example.org) or an email address that is linked to a Google Account.
You can learn more about how to choose the right email address in the email section below.
Create a new user profile: Click Admin > User profiles > New.
A user profile grants an individual user access to a specific account. You can grant multiple profiles to the same user—one for each account the user needs to access.
Each user profile has a different name. Users may have multiple profiles across multiple accounts. Switching between profiles will change the account you are in and the access you have, since each profile can have its own account and access settings.
Now you're ready to set up your user profile. Set user profile properties on the Properties tab and select a user role. Then add any filters you need on the Filters tab.
Save your user profile. As soon as you save, Campaign Manager 360 sends an email with access instructions to the user. It goes to whatever email address you entered in the email field of the user profile properties.
The user will simply need to sign in to the associated Google Account and visit https://www.google.com/dfa/trafficking.
If the account has Trafficking API access, the email also includes instructions for API access. You can learn more about API access on the Google Developers site for the DCM/DFA Reporting and Trafficking API. The API access process is the same for Campaign Manager 360.
If you need assistance setting up a user profile in a Campaign Manager 360 account, contact your active admin. If you don’t know who your admin is, ask your Campaign Manager 360 representative to submit a request on your behalf, as Campaign Manager 360 Support cannot share admin contact details (such as email addresses).
User profile properties
To create or edit user profiles, click Admin > User profiles in Campaign Manager 360. Use the sections below to manage your user profile.Email
Enter a Google Account email address or an email address that is linked to a Google Account.
Google email address: This should be a non-personal, business related Google Account email. Gmail is the most common (email@example.com).
Non-Google email address: If you have a non-Google email address, it must be linked to a Google Account before you can enter it into Campaign Manager 360.
If the user has a typical non-Google business email address (
firstname.lastname@example.org), first ask the user to link the non-Google email address to a Google Account.
If the user is a Google Apps user, you can enter a non-Google email alias for their Google Apps account. But note that many Google Apps users have a primary Gmail account for signing into their account and receiving email, and you can use this Gmail address in lieu of the alias.
When you finish creating your user profile and save it, Campaign Manager 360 will send an email to the user with instructions to access Campaign Manager 360.
The email from Campaign Manager 360 will instruct the user to sign in to the Google Account associated with the email address in the user profile.
At this point, the user can visit http://www.google.com/dfa/trafficking and sign in.
The profile name identifies the profile within Campaign Manager 360.
When you create a new profile, the part of the email address before
@ is automatically used to populate the Profile name field. For example, if you enter
email@example.com in the Email field, then
person is displayed as the Profile name. (If that profile name is already in use, Campaign Manager 360 appends a number to the end of the name.)
For users with multiple profiles, it can be helpful to change each profile name so that it's easier to recognize. For example, for a user with access to more than one Campaign Manager 360 account, it might be helpful to append the account name as part of the profile name. You can use spaces.
For new profiles, you can select a subaccount if needed. If this profile is part of a subaccount, the subaccount is displayed. Otherwise, this field isn't shown.
Note that a user profile in a subaccount will only be able to access campaigns that are within that subaccount.
Choose a user role for this profile. The user role is a set of permissions that give the profile access to various functions within Campaign Manager 360. See below for guidance on user roles.
Choose the language Campaign Manager 360 will use for this profile.
You can add notes to this field to help you remember important information about this profile.
If you need to cut off a particular user's access to Campaign Manager 360, deactivate the profile here.
Any user with billing permission can edit billing information and view fee rates, as well as enable access to other users in Campaign Manager 360.
A user role is a set of permissions in Campaign Manager 360. These permissions determine what kinds of data a user can view or edit. To see your list of user roles, click Admin > User roles.How do user roles work?
Each user accesses Campaign Manager 360 with a user profile.
The user role in their profile is the set of permissions they have in Campaign Manager 360.
You can pick different user roles for different users. This is how different users get different sets of permissions. You might use a unique user role for each user, or use the same user role for multiple users.
You can create your own user role or pick a default user role (a standard set of permissions defined by Campaign Manager 360). See the list of default user roles below
Pick a user role in the User role field of the user profile properties.
Make sure you know what kinds of access this user role is allowed. If you're not sure, check the user role first: Find your user role, open it, and check the Permissions tab. You can edit these permissions unless the user role is a default role (see the section below).
Find your user role on the "User roles" page (Admin > User roles). Click the search box to narrow down your results and find the right user role.
Open your user role.
Check or uncheck boxes to edit access. Check this list of user role permissions for help.
Save your user role.
Your changes affect every user profile in your account that is assigned this user role.
From the user roles page (Admin > User roles), click New user role.
Enter a name for the user role in the User role name field.
Do you want to create this user role for a particular subaccount? Select one from the Subaccount menu. When you create a new user role, you have the option to associate it with a particular subaccount. The user role and its permission set will be available for all user profiles you create under that subaccount, but not anywhere else. This can help you keep track of permissions sets that you customize for different subaccounts.
Choose a source user role. The permissions in the "source" user role are applied to your new user role.
You can change these permissions in the user role properties: just use the checkboxes to set the permissions for the new user role. You can always revert back to the original source permissions by clicking Revert to source.
To change the user role for multiple users:
Click Admin > User profiles.
Use the checkboxes to select user profiles.
Either (a) only select user profiles that do not belong to any subaccounts or (b) only select user profiles that all belong to the same subaccount. You cannot select a mix.
Click Change user role...
Select a new user role from the list.Click Change. This switches the user profiles you selected to the new user role.
Keep in mind that changes to permissions apply to every user profile that has the user role.
When you create a new user role, you have the option to associate it with a particular subaccount. The user role and its permission set will be available for all user profiles you create under that subaccount, but not anywhere else. This can help you keep track of permissions sets that you customize for different subaccounts.
Default user roles have predefined permission sets designed for common Campaign Manager 360 user types.
Default user roles are identified with a check mark in the Default column on the User roles page. (Admin > User roles).
The default user roles are:
- Advanced Agency Admin
- Advanced Agency Media Planner
- Advanced Agency Trafficker
- Advanced Agency Trafficker/Planner
- Advertiser/Reporting Login
- Agency Admin
- Agency Media Planner
- Agency Trafficker
- Agency Trafficker/Planner
- DC Account Manager
- DC CSA
- DC Network Admin
- Site Trafficker
- Site Trafficker (w/ approve access)
You can see the list of permissions associated with each user role by clicking on it. Here's more information about the permissions for some commonly used default user roles:
Agency Admin: Administrators (or admins) are power users with access to all aspects of Campaign Manager 360. They can perform planning and trafficking tasks, but the primary role of an admin is to supervise the account and perform administrative tasks such as managing user profiles and roles, managing sites, and so on.
Agency Media Planner: Media planners are responsible for the high-level planning and setup of campaigns. They can work with advertisers, campaigns, sites, placements, and ads, and they can view creatives. Media planners don't have access to administrative functions or to functions specific to trafficking, such as viewing Campaign Manager 360 placement tags or uploading creatives.
Agency Trafficker: Traffickers set your advertising in motion, uploading creatives, assigning ads to placements, and sending Campaign Manager 360 placement tags to advertisers. They can work with every element of a campaign.
Agency Trafficker/Planner: This user role has all the permissions of a Trafficker plus all the permissions of a Media Planner. This role can be useful for someone who takes a lead or supervisory role within your ad trafficking organization, but doesn't need Admin permissions.
Use the Filters tab of the user profile to change access to sites, advertisers, campaigns, or user roles.How do filters work?
By default, each user can access any site, advertiser, campaign, or user role in your account. But you can set filters to limit this access.
For example, you can block a user from accessing any campaigns in your account. Or you can pick specific campaigns that the user cannot access. Or you can select just a few campaigns that you wish to allow.
Your filters affect which campaigns, advertisers, sites, and user roles the user can access.
Advertiser access includes the advertiser settings and all the campaigns under that advertiser.
Campaign access includes the campaign settings and all ads, placements, etc., specific to that campaign.
Site access includes site settings and all placements that use the site.
User role access includes admin settings (such as permissions) for a particular user role. User roles are managed at Admin > User roles: if you filter out specific user roles, the user will not be able to view those user roles.
Note on subaccounts
If a user profile is in a subaccount, the user can only access data in that subaccount. The filters you set still apply, but they only apply to the subset of data in the subaccount.
Open your user profile and view the Filters tab.
For each section, pick Allow all, Choose, or Allow none.
Allow all is the default value. This setting enables the profile to view and edit all objects of that type throughout your account.
Choose assigns access to specific advertisers, sites, user roles, or campaigns. Click Choose... and select them. You can set each object to be allowed or not allowed.
Allow none blocks the profile from viewing any objects of that type.
Note that if you allow no Advertisers, you will automatically hide their Campaigns as well. After all, campaigns belong to advertisers, so a profile that can't view advertisers can't view campaigns either.
Likewise, if you select allow no Sites, you will hide all placements, since all placements are associated with sites.
Save. You can always change these settings later.
See the How do filters work section above for more details on these options.