Manage user access

Use this guide to manage access for users. This includes granting access to users and changing the kinds of permissions they have in Campaign Manager 360.

Topics in this article

Get started

See this outline of the steps to grant a user access to Campaign Manager 360 and its API.

Set up access for a user

1. To grant Campaign Manager 360 access to other users, you need admin rights. 

   • To check if you have admin rights, try to create a new user profile by navigating to Admin > User profiles > New. If you are unable to create a user profile, you do not have admin rights. Talk to an admin on your account if you need these rights.

2. Make sure you have an email address for the user who needs access. This must either be a Google Account email address (such as [e-mail]) or an email address that is linked to a Google Account. You can learn more about how to choose the right email address in the Email section below.

3. To create a new user profile, navigate to Admin > User profiles > New.

   • A user profile gives an individual user access to a specific account. You can grant multiple profiles to the same user—one for each account the user needs to access.

   • Each user profile has a different name, and users may have multiple profiles across multiple accounts. Since each profile can have its own account and access settings, switching between profiles changes the account you are in and the access you have.  

4. Set user profile properties on the Properties tab and select a user role. Add any filters you need on the Filters tab.

   See the sections below for help with editing User profile properties, User roles, and Filters.

5. After you save your user profile, Campaign Manager 360 sends an email with access instructions to the email address you entered in the email field of the user profile properties.

   • The user should sign in to the associated Google Account and visit https://www.google.com/dfa/trafficking.

   • If the account has Trafficking API access, the email also includes instructions for API access. Learn more about API access on the Google Developers site for the DCM/DFA Reporting and Trafficking API. The API access process is the same for Campaign Manager 360.

If you need assistance setting up a user profile in a Campaign Manager 360 account, contact your active admin. If you don’t know your active admin, ask your Campaign Manager 360 representative to submit a request on your behalf. Campaign Manager 360 support staff cannot share admin contact details, such as email addresses.

User profile properties

To create or edit user profiles, click Admin > User profiles in Campaign Manager 360. Use the sections below to manage your user profile.

Email

1. Enter a Google Account email address or an email address that is linked to a Google Account.

   Google email address: This should be a non-personal, business-related Google Account email, such as Gmail ([e-mail]).

   Non-Google email address: A non-Google email address must be linked to a Google Account before you can enter it into Campaign Manager 360.

   • If the user has a typical non-Google business email address ([e-mail]), ask the user to link the non-Google email address to a Google Account.

   • If the user is a Google Apps user, you can enter a non-Google email alias for their Google Apps account.

     Many Google Apps users have a primary Gmail account for signing into their account and receiving email. You can use this Gmail address instead of the alias.

2. When you finish creating your user profile, click Save.

3. Campaign Manager 360 sends an email instructing the user to sign in to the Google Account associated with the email address in the user profile.

4. The user can now visit http://www.google.com/dfa/trafficking and sign in.

You cannot change the email address once you save your new profile. If you need to change the email address, you must create an entirely new user profile.

Profile name

The profile name identifies the profile within Campaign Manager 360.

When you create a new profile, the part of the email address before @ is automatically used to populate the Profile name field. For example, if you enter [e-mail] in the Email field, then person is displayed as the Profile name. (If that profile name is already in use, Campaign Manager 360 appends a number to the end of the name.)

For users with multiple profiles, it can be helpful to change each profile name so that it's easier to recognize. For example, for a user with access to more than one Campaign Manager 360 account, it might be helpful to append the account name as part of the profile name. You can use spaces when doing so.

Subaccount

For new profiles, you can select a subaccount if needed. If this profile is part of a subaccount, the subaccount is displayed. Otherwise, this field isn't shown.

Note that a user profile in a subaccount will only be able to access campaigns that are within that subaccount.

User role

Choose a user role for this profile. The user role is a set of permissions that give the profile access to various functions within Campaign Manager 360. See below for guidance on User roles.

Language

Choose the language Campaign Manager 360 will use for this profile.

Comments

To help you remember important information about this profile, add notes to this field.

Status

If you need to stop a particular user's access to Campaign Manager 360, deactivate the profile here.

Newly created profiles are automatically activated as soon as the profile is linked to a Google Account, so there's no need to enable the checkbox while creating a new profile.

Billing

Any user with billing permission can edit billing information and view fee rates. Billing Managers and admins with billing access can also enable billing access to other users in Campaign Manager 360. Learn more about billing roles and permissions.

User roles

A user role is a set of permissions in Campaign Manager 360. These permissions determine what kinds of data a user can view or edit. To see your list of user roles, click Admin > User roles.

How do user roles work?

• Each user accesses Campaign Manager 360 with a user profile.

• The user's role in their profile is the set of permissions they have in Campaign Manager 360.

• You can pick different user roles for different users. This is how different users get different sets of permissions. You might use a unique user role for each user or the same user role for multiple users.

• You can create your own user role or pick a default user role, which is a standard set of permissions defined by Campaign Manager 360. See the list of default user roles below.

Assign a user role to your user profile

Pick a user role in the User role field of the user profile properties.

• Make sure you know what kinds of access this user role is allowed. If you're not sure, check the user role by opening it and checking the Permissions tab. You can edit these permissions unless the user role is a default role.

• If you don't see the "User role" dropdown, the user may be assigned to a billing user role that excludes other user roles. This happens when the "“Enable billing read & write access for this user” box is checked and either "Billing User" or "Billing Manager" is selected. In this case, change the Billing user role to "Standard user". This allows you to assign a user role along with the billing role.

Edit a user role

1. Find a user role by navigating to Admin > User roles. (Use the search box to narrow your results and find the right user role.)

2. Open the user role.

3. Check or uncheck boxes to edit access. See this List of user role permissions for help.

4. Click Save.

Your changes affect every user profile in your account that is assigned this user role.

Create a new user role

1. Navigate to Admin > User roles > New.

2. Enter a name for the user role in the User role name field.

   If you want to create this user role for a particular subaccount, select one from the Subaccount menu. When you create a new user role, you have the option to associate it with a particular subaccount. The user role and its permission set will only be available for all user profiles created under that subaccount. This can help you keep track of permission sets you customize for different subaccounts.

3. Choose a Source user role. The permissions in the "source" user role are applied to your new user role. To change permissions, use the checkboxes in the user role properties. You can revert to the original source permissions by clicking Revert to source.

4. Click Save.

Change user roles for multiple users

1. Navigate to Admin > User profiles.

2. Use the checkboxes to select user profiles.

   Either select user profiles that do not belong to any subaccounts, or only select user profiles that all belong to the same subaccount. You cannot select a mix.

3. Click Change user role.

4. Select a new user role from the list and click Change. This switches the user profiles you selected to the new user role.

Changes to permissions apply to every user profile that has that user role.

User roles and subaccounts

When you create a new user role, you can associate it with a particular subaccount. The user role and its permission set will only be available for all user profiles created under that subaccount. This can help you keep track of permission sets you customize for different subaccounts.

About default user roles

Default user roles have predefined permission sets designed for common Campaign Manager 360 user types.

Default user roles are identified with a check mark in the Default column on the User roles page (Admin > User roles).

The default user roles are:

• Advanced Agency Admin
• Advanced Agency Media Planner
• Advanced Agency Trafficker
• Advanced Agency Trafficker/Planner
• Advertiser/Reporting Login
• Agency Admin
• Agency Media Planner
• Agency Trafficker
• Agency Trafficker/Planner
• DC Account Manager
• DC CSA
• DC Network Admin
• Site Trafficker
• Site Trafficker (w/ approve access)

For older accounts, the names of the default user roles may be different from those listed above. 

You can see the list of permissions associated with each user role by clicking on it.

The following information addresses permissions for some commonly used default user roles:

Agency Admin: Administrators (or "admins") are power users with access to all aspects of Campaign Manager 360. They can perform planning and trafficking tasks, but their primary role is to supervise the account and perform administrative tasks, such as managing user profiles and roles, managing sites, etc.

Agency Media Planner: These users are responsible for the high-level planning and setup of campaigns. They can work with advertisers, campaigns, sites, placements, and ads, and they can view creatives. Media planners don't have access to administrative functions or functions specific to trafficking, such as viewing Campaign Manager 360 placement tags or uploading creatives.

Agency Trafficker: These users set your advertising in motion, uploading creatives, assigning ads to placements, and sending Campaign Manager 360 placement tags to advertisers. They can work with every element of a campaign.

Agency Trafficker/Planner: These users have all the permissions of a Trafficker as well as those of a Media Planner. This role can be useful for someone who takes a lead or supervisory role within your ad trafficking organization but doesn't need Admin permissions.

Filters

Use the Filters tab of the user profile to change access to sites, advertisers, campaigns, or user roles.

How do filters work?

• Filters limit which campaigns, advertisers, sites, and user roles a user can access. For example, you can block a user from accessing all campaigns in your account, or you can pick specific campaigns that the user cannot access.

  By default, each user can access any site, advertiser, campaign, or user role in your account.

Filter options

• Advertiser access includes the advertiser settings and all the campaigns under that advertiser.

• Campaign access includes the campaign settings and all ads, placements, etc. specific to that campaign.

• Site access includes site settings and all placements that use the site.

• User role access includes admin settings (such as permissions) for a particular user role. To manage user roles, click Admin > User roles. If you filter out specific user roles, the user will not be able to view them.

If a user profile is in a subaccount, the user can only access data in that subaccount. The filters you set still apply, but they only apply to the subset of data in the subaccount.

Edit filter settings

1. Open your user profile and click the Filters tab.

2. For each section, choose Allow all, Choose ... , or Allow none.

   • Allow all is the default value. This setting enables the profile to view and edit all objects of that type throughout your account.

   • Choose ... assigns access to specific advertisers, sites, user roles, or campaigns. You can set each object to be allowed or not allowed.

   • Allow none blocks the profile from viewing any objects of that type.

     If you allow no advertisers, you will also automatically hide their campaigns, since campaigns belong to advertisers. Likewise, if you choose to allow no sites, you will hide all placements, as all placements are associated with sites.

3. Click Save.

   • You can always change these settings again.

See the How do filters work? section above for more details on these options.

Troubleshooting

If you experience difficulty creating a user profile in your Campaign Manager 360 account, please contact your Google Account Team who will be able to support you.