Manage user roles and permissions for the Intelligence Platform.
MX’s customizable roles and permissions enable your team admins to control the information that team members can access by assigning them predefined or custom roles based on their responsibilities.To access this feature in the Intelligence Platform, log into your institution portal and select Settings (gear icon). This opens the Team Member Roles page. From here, you can choose the Team Members or Roles tab depending on what you want to do:
Team Members: This is where you can add or remove team members (including admins), view all team members and their assigned roles, and export a complete list of every team member and their associated role and permissions.
There are three predefined roles that you can assign team members:
Admin: The Admin role grants team members full access to everything within the platform. Your institution needs at least one admin.
Developer: The Developer role grants team members access to the Developer tab and all API-related permissions for the Data Access product.
Reader: The Reader role grants team members view-only access to content that doesn’t include sensitive information, such as billing, API credentials, or personally identifiable information.
If you’re converting existing roles, access remains the same for each role type. For example, the Institution Admin role becomes the Admin role, and the Institution (Read Only) role becomes the Reader role.
In the Role Name field, enter a descriptive name for the role (for example, Marketing Manager or Data Analyst). Avoid ambiguous names like Role #1.
In the Description field, enter a clear description for the role.
Review the available permissions (organized by category) and select only the permissions team members need for this role.
(Optional) In the Members field, add existing team members to automatically assign the role to them.
Select Save.
If you don’t add team members during role creation, you can assign the role to them later from the Team Members tab.
Need an example? A custom role for a Marketing Manager might combine these permissions: Manage campaigns, Manage audiences, Manage segments, Manage segment exports, Manage segment imports, Manage campaign exports, and Read marketing users.
Permissions control what a team member can access and do within your institution portal, and are organized into categories based on the MX products and features your institution uses.Most permissions are tied to action buttons, such as Create, Edit, and Delete. If a team member hasn’t been granted permissions to perform an action, the action button is disabled for them and includes a tooltip that explains the permission requirement for access. The exception to this is sensitive content, which is hidden to team members who don’t have the permissions to view them.Permissions are always cumulative, which means that team members can have multiple roles assigned at once and receive the aggregate of all abilities from all their roles. For example, if a team member is assigned a Reader role and a custom Marketing Manager role, they have both the read-only permissions and the marketing management permissions.Refer to the following table for a complete list of permissions that are available by product.
Product
Permission
Description
Any
Write application settings
Edit the public URL within Settings.
Any
Billing
View the Billing dashboard within Settings.
Any
API usage
View the Open Banking API Usage dashboard within Settings.
Any
Write OIDC
Edit the OIDC provider configuration within Settings.
Any
Add roles
Create and edit roles for the institution.
Any
Destroy roles
Delete roles from the institution.
Any
Write theme settings
Edit the institution theme within Settings.
Any
Add users
Invite team members and assign roles to them.
Any
Destroy users
Remove team members from the institution.
Any
Read users and abilities export
Export the team roster and roles as a CSV file.
Data Access
Read API access credentials
View API access credentials owned by the user’s own institution.
Data Access
Write API access credentials
View, create, and revoke API access credentials owned by the user’s own institution.
Data Access
Read API metrics
View the institution’s API performance metrics.
Data Access
Developer page
Access the Developers section of the institution portal.
Data Access
Write test users
View, create, and delete test users for the user’s own institution, and reauthenticate them or change their consents.
Customer Analytics
Manage analytics integrations
Manage CRM integrations.
Messaging
Manage campaigns
Create, view, update, and delete the institution’s Marketing Hub campaigns, upload campaign images, and launch or activate them.
Messaging
Manage audiences
Edit or delete an audience.
Messaging
Manage campaign exports
Export message data.
Messaging
Manage integration exports
Create, view, update, and delete the institution’s Data Management integration exports.
Messaging
Read marketing users
View the institution’s Marketing Hub analytics users.
Messaging
Read PII
View personally identifiable information within Audience details (name, email, zip code).
Messaging
Manage segment exports
Export an audience.
Messaging
Manage segment imports
Import an audience.
Messaging
Manage segments
Create an audience.
Messaging
Manage user opt out imports
Create, view, update, and delete the institution’s Marketing Hub user opt-out imports, including file uploads.
Remember to periodically review team member roles and permissions, especially when responsibilities change. You can use the Export button under the Team Members tab to export a list of members, roles, and permissions to verify that access is aligned with current needs.
For questions or issues with roles and permissions, either contact your Client Success representative directly or file a support ticket by selecting Contact Support from the Support option (question mark icon) in the platform.