AEP Role Based Access Control

[Alkash4]

Hi everyone,

I am working on role-based access control (RBAC) for the Adobe Experience Platform (AEP). I want to know if it's possible to set user permissions to allow a user to create an audience but restrict them from publishing it. There are several options available for resource permissions within AEP, but I would like guidance on which permissions to grant and which to restrict in order to achieve this.

Thanks,

[GigiCotruta]

Hello @Alkash4,

If I understood you correctly, you want a user to be able to create segments and unable to activate those to destinations. If this is the case. You want to make sure that you give the user Segment Persmissions:

Make sure not to give the user the following Permissions so he can not activete the created/edited segments: 

Youc an find more info in this documentation: 
https://experienceleague.adobe.com/en/docs/experience-platform/access-control/home

If you want to give the same level of access to several users, you can create a group.

Hopefully it helped, 

BR.

[Alkash4]

@GigiCotruta 

Thanks a lot for your response.

I am trying to restrict users from publishing an audience. After approval, the audience can then be activated to destinations. I want users to create an audience using the Segment Builder and save it as a draft, but they should not be able to publish it. Only an authorized approver should be able to publish the audience after reviewing the rules.

I am trying to achieve this by assigning different permissions available. Different permissions are available in AEP under the 'Permissions' section within Administration. These include 'View Segments' and 'Manage Segments.' However, I am still unable to restrict users from publishing the audience.

I am attaching screenshots of the AEP page where I have saved the audience I created for testing purposes in 'Draft' to clarify my question and what I am trying to achieve. Please review it and let me know if I am on the right track. I would appreciate any suggestions on how to achieve this. 

[GigiCotruta]

I see, @Alkash4,

Unfortunetly, I don't think that there is a way to achieve what you are looking.

The audiences can be changed at any time, so, as long as those are not activated, it is not a problem to have them created. You can also deactivate those audiences once created, and publish those after the rules review. You can use folders and place there all the deactivated audiences that are waiting for their review. 

[Alkash4]

@GigiCotruta ,Thank you for your insights.

If I find anything more related to this, I will update you.

Regards,

[brekrut]

The managing of segments is controlled via profile management.  This will control the viewing and creating of segment. The activation of segments is controlled within the destinations section of role based access control.