During installation of the Marketing Automation solution, four security roles are created in CRM. These roles are specific to Marketing Automation and have very different purposes.
Every CRM user needing access to Marketing Automation should be assigned a Marketing Automation security role. The descriptions below outline how you should assign these roles to your users. Should the default Security Roles not meet some users' security needs, you can also create custom Security Roles.
Permissions
Core
This role should be assigned to all users, even users not using Click applications. It contains the minimum set of privileges that are required by the Click plugins and will prevent failures in creating Contacts and Opportunities. It includes the Write privilege for 10 of our entities, including Subscription Preferences, Email Events, Sent Emails, Posted Forms, etc.
Core Security Role Settings ❯
User
This security role should be assigned to users (non-administrators) who view data generated by Click or users who will be accessing and utilizing the Marketing Automation features. Most of the privileges are set to the Read level so the users can view the tracking data. This role also allows the user the ability to send emails and to access most of the Marketing Automation features.
User Settings ❯
Service
This role should be assigned to the Click Service User or your Click Application User if you do not wish to use the CRM System Administrator role. This role provides full access to Marketing Automation functionality, so it can also be assigned to Marketing Automation power users.
The user set up as the Click Service User must be set to have the Read-Write Access Mode, not Administrative or Read-only.
Service User Settings ❯
Lock Email Blocks
This role should be assigned to users who need to be able to lock and unlock blocks in the Drag and Drop email editor. When a block is locked anyone without this role will not be able to edit the content of the block. More here.
Allows users to lock email blocks in the Drag & Drop email template designer so that users without this role cannot edit them.
Lock Email Blocks Settings ❯
Location
Security Roles can be found by navigating to Advanced Settings > Settings > Security:
Then select Security Roles: