Manage user access

Use this guide to manage access for users. This includes granting access to users and changing the kinds of permissions they have in Campaign Manager.

Get started

See this outline of the steps to grant a user access to Campaign Manager and its API.

Set up access for a user
  1. Make sure you have admin rights. To grant Campaign Manager access for other users, you need admin rights. Many traffickers in Campaign Manager have admin rights.

    To check if you have admin rights, simply try to create a new user profile: Admin > User profiles > New user profile. If you are unable to create a user profile, you do not have admin rights. Talk to an admin on your account if you need these rights.

  2. Make sure you have an email address for the user who needs access. This must either be a Google Account email address (e.g., user@gmail.com) or an email address that is linked to a Google Account.

    You can learn more about how to choose the right email address in the email section below.

  3. Create a new user profile: Click Admin > User profiles > New user profile.

    • A user profile grants an individual user access to a specific account. You can grant multiple profiles to the same user—one for each account the user needs to access.

    • Each user profile has a different name. Users may have multiple profiles across multiple accounts. Switching between profiles will change the account you are in and the access you have, since each profile can have its own account and access settings.  

  4. Now you're ready to set up your user profile. Set user profile properties on the Properties tab and select a user role. Then add any filters you need on the Filters tab.

    See the sections below for help. They guide you through editing user profile properties, user roles, and filters.

  5. Save your user profile. As soon as you save, Campaign Manager sends an email with access instructions to the user. It goes to whatever email address you entered in the email field of the user profile properties.

User profile properties

To create or edit user profiles, click Admin > User profiles in Campaign Manager. Use the sections below to manage your user profile.

Email
  1. Enter a Google Account email address or an email address that is linked to a Google Account.

    Google email address: This should be a non-personal, business related Google Account email. Gmail is the most common (user@gmail.com).

    Non-Google email address: If you have a non-Google email address, it must be linked to a Google Account before you can enter it into Campaign Manager.

    • If the user has a typical non-Google business email address (user@company.com), first ask the user to link the non-Google email address to a Google Account.

    • If the user is a Google Apps user, you can enter a non-Google email alias for their Google Apps account. But note that many Google Apps users have a primary Gmail account for signing into their account and receiving email, and you can use this Gmail address in lieu of the alias.

  2. When you finish creating your user profile and save it, Campaign Manager will send an email to the user with instructions to access Campaign Manager.

  3. The email from Campaign Manager will instruct the user to sign in to the Google Account associated with the email address in the user profile.

  4. At this point, the user can visit http://www.google.com/dfa/trafficking and sign in.

You cannot change the email address once you save your new profile. If you must change email address, create an entirely new user profile.
Profile name

The profile name identifies the profile within Campaign Manager.

When you create a new profile, the part of the email address before @ is automatically used to populate the Profile name field. For example, if you enter person@google.com in the Email field, then person is displayed as the Profile name. (If that profile name is already in use, Campaign Manager appends a number to the end of the name.)

For users with multiple profiles, it can be helpful to change each profile name so that it's easier to recognize. For example, for a user with access to more than one Campaign Manager account, it might be helpful to append the account name as part of the profile name. You can use spaces.

Subaccount

For new profiles, you can select a subaccount if needed. If this profile is part of a subaccount, the subaccount is displayed. Otherwise, this field isn't shown.

Note that a user profile in a subaccount will only be able to access campaigns that are within that subaccount.

User role

Choose a user role for this profile. The user role is a set of permissions that give the profile access to various functions within Campaign Manager. See below for guidance on user roles.

Language

Choose the language Campaign Manager will use for this profile.

Comments

You can add notes to this field to help you remember important information about this profile.

Active

If you need to cut off a particular user's access to Campaign Manager, deactivate the profile here.

Newly created profiles are automatically activated as soon as the profile is linked to a Google Account, so there's no need to enable the checkbox while creating a new profile.

User roles

A user role is a set of permissions in Campaign Manager. These permissions determine what kinds of data a user can view or edit. To see your list of user roles, click Admin > User roles.

How do user roles work?
  • Each user accesses Campaign Manager with a user profile.

  • The user role in their profile is the set of permissions they have in Campaign Manager.

  • You can pick different user roles for different users. This is how different users get different sets of permissions. You might use a unique user role for each user, or use the same user role for multiple users.

  • You can create your own user role or pick a default user role (a standard set of permissions defined by Campaign Manager). See the list of default user roles below

Assign a user role to your user profile

Pick a user role in the User role field of the user profile properties.

Make sure you know what kinds of access this user role is allowed. If you're not sure, check the user role first: Find your user role, open it, and check the Permissions tab. You can edit these permissions unless the user role is a default role (see the section below).

Edit a user role
  1. Find your user role on the "User roles" page (Admin > User roles). Click the search box to narrow down your results and find the right user role.

  2. Open your user role.

  3. Check or uncheck boxes to edit access. Check this list of user role permissions for help.

  4. Save your user role.

Your changes affect every user profile in your account that is assigned this user role.

Create a new user role
  1. From the user roles page (Admin > User roles), click New user role.

  2. Enter a name for the user role in the User role name field.

    Do you want to create this user role for a particular subaccount? Select one from the Subaccount menu. When you create a new user role, you have the option to associate it with a particular subaccount. The user role and its permission set will be available for all user profiles you create under that subaccount, but not anywhere else. This can help you keep track of permissions sets that you customize for different subaccounts.

  3. Choose a source user role. The permissions in the "source" user role are applied to your new user role.

    You can change these permissions in the user role properties: just use the checkboxes to set the permissions for the new user role. You can always revert back to the original source permissions by clicking Revert to source.

  4. Click Save.

Change user roles for multiple users

To change the user role for multiple users:

  1. Click Admin > User profiles.

  2. Use the checkboxes to select user profiles.

    Either (a) only select user profiles that do not belong to any subaccounts or (b) only select user profiles that all belong to the same subaccount. You cannot select a mix.

  3. Click Change user role...

  4. Select a new user role from the list.

    Click Change. This switches the user profiles you selected to the new user role.

Keep in mind that changes to permissions apply to every user profile that has the user role.

User roles and subaccounts

When you create a new user role, you have the option to associate it with a particular subaccount. The user role and its permission set will be available for all user profiles you create under that subaccount, but not anywhere else. This can help you keep track of permissions sets that you customize for different subaccounts.

About default user roles

Default user roles have predefined permission sets designed for common Campaign Manager user types.

  • Default user roles are identified with a check mark in the Default column on the User roles page. (Admin > User roles).

  • Default user roles cannot be edited. Instead, you can copy the default user role and modify the copy (select the default user role and click Copy).

The default user roles are:

  • Advanced Agency Admin
  • Advanced Agency Media Planner
  • Advanced Agency Trafficker
  • Advanced Agency Trafficker/Planner
  • Advertiser/Reporting Login
  • Agency Admin
  • Agency Media Planner
  • Agency Trafficker
  • Agency Trafficker/Planner
  • DC Account Manager
  • DC CSA
  • DC Network Admin
  • Site Trafficker
  • Site Trafficker (w/ approve access)
For older accounts, the names of the default user roles may be different from those listed above. 

You can see the list of permissions associated with each user role by clicking on it. Here's more information about the permissions for some commonly used default user roles:

Agency Admin: Administrators (or admins) are power users with access to all aspects of Campaign Manager. They can perform planning and trafficking tasks, but the primary role of an admin is to supervise the account and perform administrative tasks such as managing user profiles and roles, managing sites, and so on.

Agency Media Planner: Media planners are responsible for the high-level planning and setup of campaigns. They can work with advertisers, campaigns, sites, placements, and ads, and they can view creatives. Media planners don't have access to administrative functions or to functions specific to trafficking, such as viewing Campaign Manager placement tags or uploading creatives.

Agency Trafficker: Traffickers set your advertising in motion, uploading creatives, assigning ads to placements, and sending Campaign Manager placement tags to advertisers. They can work with every element of a campaign.

Agency Trafficker/Planner: This user role has all the permissions of a Trafficker plus all the permissions of a Media Planner. This role can be useful for someone who takes a lead or supervisory role within your ad trafficking organization, but doesn't need Admin permissions.

Filters

Use the Filters tab of the user profile to change access to sites, advertisers, campaigns, or user roles.

How do filters work?
  • By default, each user can access any site, advertiser, campaign, or user role in your account. But you can set filters to limit this access.

  • For example, you can block a user from accessing any campaigns in your account. Or you can pick specific campaigns that the user cannot access. Or you can select just a few campaigns that you wish to allow.

Your filters affect which campaigns, advertisers, sites, and user roles the user can access.

Filter options

  • Advertiser access includes the advertiser settings and all the campaigns under that advertiser.

  • Campaign access includes the campaign settings and all ads, placements, etc., specific to that campaign.

  • Site access includes site settings and all placements that use the site.

  • User role access includes admin settings (such as permissions) for a particular user role. User roles are managed at Admin > User roles: if you filter out specific user roles, the user will not be able to view those user roles.

Note on subaccounts

If a user profile is in a subaccount, the user can only access data in that subaccount. The filters you set still apply, but they only apply to the subset of data in the subaccount.

Edit filter settings
  1. Open your user profile and view the Filters tab.

  2. For each section, pick Allow all, Choose, or Allow none.

    • Allow all is the default value. This setting enables the profile to view and edit all objects of that type throughout your account.

    • Choose assigns access to specfic advertisers, sites, user roles, or campaigns. Click Choose... and select them. You can set each object to be allowed or not allowed.

    • Allow none blocks the profile from viewing any objects of that type.

      Note that if you allow no Advertisers, you will automatically hide their Campaigns as well. After all, campaigns belong to advertisers, so a profile that can't view advertisers can't view campaigns either.

      Likewise, if you select allow no Sites, you will hide all placements, since all placements are associated with sites.

  3. Save. You can always change these settings later.

See the How do filters work section above for more details on these options.

Was this article helpful?
How can we improve it?