Maintain Your Marketing Cloud Engagement Admin Certification for Winter '26

Learning Objectives

After completing this unit, you’ll be able to:

Configure custom roles based on new permissions requirements.
Manage data across additional geographic areas.
Rotate client secrets securely for OAuth 2.0 integrations in installed packages.
Investigate, troubleshoot, and resolve errors with improved file transfer error messages.

Stay Current with Your Certification

Salesforce certifications hold the most value when you keep them relevant. To keep your Marketing Cloud Engagement (MCE) Administrator certification current, complete this module by the due date.

Interested in learning more about getting certified? Check out the Marketing Cloud Engagement Administrator certification exam.

While anyone can earn this badge, this module is designed for those who hold the Marketing Cloud Engagement Administrator certification.

As part of the Salesforce Certification Program, you agree to the terms of the Salesforce Certification Program Agreement. Review the exam policies in the agreement and the Salesforce Certification Program Agreement and Code of Conduct article before you continue.

Marketing Cloud Engagement Administrator Certification Overview

The Marketing Cloud Engagement Administrator certification validates your ability to configure Marketing Cloud products by utilizing industry best practices. You understand data structure in subscriber data management, troubleshoot account configuration and user requests, and can thoroughly navigate setup.

As a Marketing Cloud Engagement Administrator, you deliver value when you:

Manage channel configurations including Mobile Studio, Email Studio, Advertising Studio, and Journey Builder.
Understand the foundations of digital marketing including governance and compliance, product offerings, and security best practices.
Use Marketing Cloud including doing data cleanup, generating reports, monitoring accounts, and providing system availability.

In this module, we highlight key updates you need to know for Winter ’26 to keep your certification current and your skills sharp.

Changes to Custom Roles and Permission Requirements

Marketing Cloud Engagement users need additional permissions enabled to create or modify journeys that contain certain activities and entry events related to Sales Cloud and Service Cloud. In order to modify journeys that have Salesforce Entry Events or Sales or Service Cloud activities, a user must have a role assigned with both of these permissions allowed:

Email | Integrations | Salesforce CRM
Journey Builder | Sales And Service Cloud

Marketing Cloud Engagement Administrators need to update custom roles to include the relevant permissions. The new permissions enable administrators to protect data in the connected CRM org. Previously, access to Salesforce CRM activities and entry events was bundled with other permissions which did not allow this granular control.

Expansion of Transfer Location Destinations

In order to improve your ability to manage data across geographic areas, we’ve added more file transfer location destination options for AWS S3 also known as AWS Simple Storage Service. As the data may now be stored in a closer location, this change can reduce latency and file transfer times, while meeting regulatory requirements. Now, international customers can select regional AWS S3 pods aligned with their geographic location. Administrators can configure the following external file locations in Setup > Data Management > File Locations:

Asia Pacific (Hyderabad)
Asia Pacific (Jakarta)
Asia Pacific (Melbourne)
Canada West (Calgary)
Europe (Spain)
Europe (Zurich)
Israel (Tel Aviv)
Middle East (UAE)
AWS GovCloud (US-East)
AWS GovCloud (US-West)

Rotate Client Secrets Securely

Previously, a secret rotation would require some downtime for external systems. Marketing Cloud Engagement Administrators can now create staged client secrets for existing OAuth 2.0 integrations in installed packages. This feature helps rotate client secrets while minimizing downtime. With this release, an application can continue to use the previous secret while the application is updated with the staged secret.

When you create a staged secret for an Installed Package, Marketing Cloud Engagement generates a new OAuth 2.0 client secret. When a secret is staged, both the previous secret and the staged secret can be used to request an access token. After updating external apps and integrations to use the staged secret, activate the staged secret to make the previous secret inactive. Activating a staged secret is permanent and can't be undone.

Review Clearer Error Messages

We’ve simplified and clarified six file transfer error messages so Administrators can troubleshoot faster. These new error messages don’t just summarize the issue, but instead, the messages go into detail and include the likely fix. Because of this, you may need to make changes based on your Setup configurations. If your implementation automates error handling, review the updated messages, and then adjust your automations as needed. Review the following table to compare the previous error messages and what they’ve been replaced with based on failure reasons.

Failure Reason	Old Message	New Message
Wrong path of file locations in Enhanced FTP	Import failed due to system error	Invalid URI setup in File Transfer Location. Re-verify File Transfer Location configuration and try again.
Invalid Amazon S3 credentials	System error for invalid Amazon S3 credentials	File Transfer Location connection was unsuccessful. Access denied for the AmazonS3 location.
File transfer activity timed out	FTA failed due to FTPTimeoutException	An error has occurred when executing command on remote server. Ensure folders or files exist on remote server before retrying this File Transfer Activity.
Expired Azure Blob SAS token	Blob SAS token has expired. Expiry(se)	The Azure Blob SAS token has expired. Generate a new token and update the file location.
Missing folder error	System error for missing folder locations	We can't find the path for this file. Validate the activity and file location parameters, then try again.
Missing authentication key	General system error	The key used to authenticate is missing. Verify that the Auth Key associated with the File Location is correct.

Sum It Up

You’ve learned about some of the most important Marketing Cloud Engagement feature releases over the past year, including custom roles and permissions, additional file transfer locations, staged client secrets, and file transfer error messages. Now it’s time to test your understanding of these topics and complete the quiz to maintain your Marketing Cloud Engagement Administrator certification.

Geschätzte Zeit

Themen

Benötigen Sie Hilfe?

Marketing Cloud Engagement – Ressourcen