Manage Users and Roles

Learning Objectives

After completing this unit, you’ll be able to:

  • Plan the implementation of Marketing Cloud in your company.
  • Name standard Marketing Cloud roles.
  • Set up a Marketing Cloud user.

Implementation Plan

Now that you’ve completed the basic setup of your new Marketing Cloud account, it’s time to plan for how your account will be used and who will use it. Use the following questions and checklist to help you plan. Then, in the next units, you’ll learn how to set up some of these items.

Plan of Action
Questions to Ask
Identify business units needed.
What is the organizational structure of your business? Does that structure impact how Marketing Cloud will be used?
List each user, their anticipated Marketing Cloud role, and map to business units if applicable. List any additional stakeholders.
Who needs to access Marketing Cloud? What level of access does each person need?
Map the anticipated data flow between Marketing Cloud and other systems and third-party vendors.
Are you connecting Marketing Cloud to other Salesforce clouds or external CRMs?
Identify sample data feeds in .csv or .txt format and a data schema or dictionary of field names, lengths, types, and so on.
Do you know what data feeds you’ll use in Marketing Cloud and how you will use them?
List subscriber attributes, such as city or gender, used to organize the segmentation logic needed for sending customized messages to your subscribers.
How will your subscriber data be organized?
Identify any external programs you will use in addition to Marketing Cloud reports to track analytics.
How are you tracking analytics?

Marketing Cloud User Management

Marketing Cloud includes standard roles and permissions for how areas of the application can be accessed and used. Roles are convenient because they package a set of permissions that you can grant to a user, rather than having to manually grant individual permissions to each user. A permission grants a user access to something and determines what they can do with it. For example, you can grant a user permission to read something, but not create something.

  • Marketing Cloud Administrator—This role assigns Marketing Cloud roles to users and manages channels, apps, and tools. (Hint: this is you!)
  • Marketing Cloud Viewer—This role views cross-channel marketing activity results in Marketing Cloud.
  • Marketing Cloud Channel Manager—This role creates and executes cross-channel interactive marketing campaigns and administers specific channels like Email Studio.
  • Marketing Cloud Security Administrator—This role maintains security settings and manages user activity and alerts.
  • Marketing Cloud Content Editor/Publisher—This role creates and delivers messages through applicable channel apps.

You can copy and customize a table like this to organize your list of users.

User Name
Email Address
Role (Choose One)
Business Unit


  • Administrator
  • Viewer
  • Channel Manager
  • Security Administrator
  • Editor/Publisher

Don’t see a role that fits a particular user? You can customize roles or create additional roles in Marketing Cloud. Let’s try it.

Create a Role

  1. Navigate to Marketing Cloud Setup.
  2. Use Quick Find to navigate to Roles.
  3. A list of all the standard roles appears. Select an existing role to edit it or click Create to make a new one.
  4. Give the new role a name and select the permissions to Allow or Deny for the role.
  5. Save the role.
Note

Note

An explicitly denied permission always overrides all other permissions. When a permission is not explicitly granted or denied, Marketing Cloud defaults to a deny permission unless another role grants that permission.

Create a User

With your roles ready to go, you can now add users to Marketing Cloud and apply a role to that user.

  1. Navigate to Marketing Cloud Setup.
  2. Use Quick Find to navigate to Users.
  3. Click Create.

Review Add a User in Salesforce Help to learn how to complete specific fields when creating a user. There are options to specify if and how the email address for that user can be used for Marketing Cloud email sends. You can also specify time zone, language settings, and more.

User Preferences

After logging in, your Marketing Cloud users can adjust their preferences in Marketing Cloud to manage their own user experience. Preferences include Time Zone, Culture Code (language), Name, and more. 

  1. To adjust your individual Marketing Cloud preferences, click Cloud Preferences under your username.
  2. In User Settings, click Edit to change things such as your display name, reply email address, time zone, culture code (language), and more.
  3. In Default Login Preference, select which Marketing Cloud app opens automatically when you log in to Marketing Cloud.

The Cloud Preferences interface with the mouse cursor clicking the Cloud Preferences link in the Settings menu.

SSO Authentication

We understand that some companies want to use a third-party identity provider to authenticate their Marketing Cloud users. Good news! You can enable single sign-on (SSO) authentication for Marketing Cloud. Keep in mind the following when setting up SSO Authentication.

  • Marketing Cloud supports identity providers that utilize the SAML 2.0 specification. The configuration must trust the Marketing Cloud product as a service provider, sometimes called a relying party.
  • You need to create an encryption key for Marketing Cloud activities.
  • After you engage and configure your service provider and create a key, you must configure Marketing Cloud to use that identity provider.
  • Test your SAML enablement on a single user before enabling others on your account. You can better resolve any configuration issues or errors when dealing with a single user.

Review Single Sign-On Authentication Via SAML 2.0 on Salesforce Help for step-by-step instructions.

Resources