Learn Administration Basics
After completing this unit, you’ll be able to:
- Explain types of Marketing Cloud tenants.
- Describe what a business unit is.
- Identify what you can configure in Marketing Cloud Administration.
- Allowlist IP addresses for Marketing Cloud.
As a Marketing Cloud developer, you may or may not have admin access to a Marketing Cloud account, but it helps to know how Marketing Cloud is structured as you’re developing custom solutions. In this unit, we explore some admin concepts, starting from the top level of an account down to specific user permissions. Let’s take a look at Marketing Cloud account administration.
Tenants, MIDs, and Endpoints
Marketing Cloud is an any-size business solution. Whether your company is a team of 10 or a team of 10,000 in 10 countries, you can use Marketing Cloud in a way that fits your company’s needs. The Marketing Cloud edition your company purchases dictates the type of tenant you’re working with. A tenant represents your top-level Enterprise account and its business units, your Core account, your top-level Agency account, or your Client account, depending on your tenant type.
||A tenant is the top-level account and all associated business units.
||A tenant is the top-level account and all associated On-Your-Behalf or Lock & Publish business units.
||A tenant is a single account.
||Each top-level account and each associated client account is a separate tenant.
A unique Member Identification Code, or MID, is assigned to every account (whether it’s Core, Enterprise or Agency) and any associated child accounts. The MID value is used to identify that entity. So, depending on your Marketing Cloud edition, tenants can include single or multiple MIDs.
- An Enterprise 2.0 tenant includes multiple MIDs for Enterprise-edition accounts.
- An Enterprise tenant includes multiple MIDs.
- A Core tenant includes a single top-level account with one MID.
- An Agency tenant includes only the top-level account. Each associated client account unit is a separate tenant.
The tenant is important because you must reference the tenant’s subdomain to make API requests. We’ll show you how to access that information later in this unit.
If you’re working with APIs, you’ll also need to know the MID of the Marketing Cloud account you’re working with. There are a couple of ways to locate the MID after you log into Marketing Cloud.
Option 1: Hover over your account name to see the MID.
Option 2: Under your username, navigate to Setup. Under Company Settings, click Account Settings. The MID is listed as the Account ID.
Marketing Cloud also assigns a unique, system-generated subdomain to each of its tenants. Your subdomain is represented by a 28-character string starting with the letters "mc." When your subdomain is appended to Marketing Cloud APIs, it creates endpoints that are unique to your tenant. Only your tenant can use your endpoints. No other Marketing Cloud customer can use them for their API requests.
For example, Northern Trail Outfitters’ tenant has this subdomain:
These are their endpoints:
REST API endpoint:
SOAP API endpoint:
When you create a package in Marketing Cloud to configure API requests that use an access token, you can find your tenant’s endpoints, which contain your subdomain.
- In Marketing Cloud Setup, click Installed Packages under Apps.
- Select a package. (We’ll talk more about what this is in the next unit.)
- On the Details page, find the endpoints under Components.
If you’re working with an Enterprise or Enterprise 2.0 tenant, you’ll encounter business units. Business units are each assigned a unique MID. Use business units to control access to information and sharing of information throughout Marketing Cloud. For example, a company with multiple divisions or brands can create a business unit for each brand, so that users within that business unit can access only their brand-specific content. You can then use user roles and permissions to control what users can do within a business unit. You can also use business units to control user access to develop API requests.
Depending on your needs, you can use API interactions to create, update, and delete business units and set or change permissions (you can also do this directly within Marketing Cloud admin). To manage business units, you can use API requests to build your own user interface or integrate existing software with Marketing Cloud.
Accounts, User Roles, and Permissions
How an account, tenant, or business unit is actually used is determined by the account settings, user roles, and user permissions configured by the administrator.
Account admins control configuration information on the Account Settings workspace in Marketing Cloud Setup. Setup is divided into Account, Security, Applications, and Data Management.
- Administration: Manage roles, users, and business units. Define file transfer locations, such as external FTP sites, and manage security keys and other security options used to encrypt and decrypt data, digitally sign email messages, and implement single sign-on for your Marketing Cloud account.
- Platform Tools: Set up cross-cloud integrations and create packages for API integrations. Configure the campaigns tool, set up approvals and workflows, and configure Marketing Cloud apps.
- Settings: Find information such as the Account ID, default settings for emails, sender authentication domain, and more. Configure security settings, such as session timeouts. View the Identity Verification Access Log.
User roles and permissions control everything from access to business units or Marketing Cloud products, such as Journey Builder or Email Studio, to what a user can do within a product, such as creating or sending a message.
A role is a set of permissions. Marketing Cloud includes five standard roles, but you can also create and customize roles for your account.
A permission grants a user access to something and determines what they can do with it. For example, you can grant a user permission to read something, but not create something.
When it comes to users, administrators can:
- Add users
- Modify user permissions
- Disable users
- Reset passwords
If you have administrator permissions, you can manage users in Marketing Cloud.
- Navigate to Setup (Hint: it’s under your username).
- Click Users.
- To add a user, click Create.
- To update a user, click the user and click Edit.
Check out Marketing Cloud Account User Permissions on Salesforce Help to learn more about how permissions determine the actions a user can take in Marketing Cloud.
IP Address Allowlist
Allowlisting is the process of configuring a spam filter to exempt certain email messages from being filtered or rejected. In this case, it refers to configuring your own corporate mail server so that it doesn't reject or filter the email campaigns you send via Marketing Cloud.
Your servers can interact with Marketing Cloud applications for several different reasons:
- You use Marketing Cloud API to create and send your email and SMS messages.
- You use Marketing Cloud Connect.
- You use Marketing Cloud for Microsoft Dynamics CRM integration.
To properly use the API or the integrations, allowlist Marketing Cloud server IP addresses to allow uninterrupted communication. Because server configurations are unique to each instance, apply them according to your system.
Now that you understand Marketing Cloud developer tools and admin basics, in the next unit we walk through the steps to set up your developer environment.
- Salesforce Help: Administration in Marketing Cloud
- Salesforce Help: Business Units in Marketing Cloud
- Salesforce Help: IP Addresses for Inclusion on Allowlists in Marketing Cloud
- Salesforce Help: Marketing Cloud Roles
- Salesforce Help: Marketing Cloud Tenant Types
- Salesforce Help: Marketing Cloud Users
- Salesforce Developer: Your Subdomain and Your Tenant's Endpoints