Braze permissions
Learn how to create permission sets, create roles, edit user permissions, and export user permissions, so you can ensure your users only access the workspaces and features they need most.
Creating a permission set
Use permission sets to bundle permissions related to specific subject areas or actions. They can be applied to dashboard users who need the same access across different workspaces. To create a permission set, go to Settings > Permission Settings, then select Create permission set. For a description of each permission, see List of permissions.
Creating a role
Roles allow for more structure by bundling together your individual custom permissions with workspace access controls. This is especially useful if you have many brands or regional workspaces in one dashboard. With roles, you can add dashboard users to the right workspaces and directly grant them the associated permissions. For a description of each permission, see List of permissions.
| Role Name | Workspace | Permissions |
|---|---|---|
| Marketer - Fashion Brands | [DEV] Fashion Brand, [QA] Fashion Brand, [PROD] Fashion Brand | “Access Campaigns, Canvases, Cards, Feature Flags, Segments, Media Library, and Preference Center” “Manage Media Library Assets” |
| Marketer - Skincare Brands | [DEV] Skincare Brand, [QA] Skincare Brand, [PROD] Skincare Brand | “Access Campaigns, Canvases, Cards, Feature Flags, Segments, Media Library, and Preference Centers” “Manage Media Library Assets” |
| User Management - All Brands | [DEV] Fashion Brand, [QA] Fashion Brand, [PROD] Fashion Brand, [DEV] Skincare Brand, [QA] Skincare Brand, [PROD] Skincare Brand | “Manage Dashboard Users” “Manage Teams” |
How do permission sets and roles differ from teams?
You can use team, permission sets, and user roles to manage dashboard user access and responsibilities within Braze. Each feature encompasses a different collection of permissions and access-controls.
Key differences
At a high level, each feature has a different scope:
- Permission sets control what dashboard users can do across all workspaces.
- Roles control what dashboard users can do in specific workspaces.
- Teams control the audiences that dashboard users can message.
| Feature | What you can do | Scope of access |
|---|---|---|
| Permission sets | Bundle permissions related to specific subject areas or actions (such as for “Developers” and “Marketers”), then apply them to dashboard users who need the same permissions across different workspaces. | Company wide |
| Roles | Bundle individual custom permissions and workspace-access controls into predefined roles (such as “Marketer - Fashion Brands” and “Marketer - Skincare Brands”), then assign a role to dashboard users to directly grant them the associated workspace access and permissions. Users with this level of access are typically managers in more tightly controlled environments or regular dashboard users. |
Specific workspaces |
| Teams | Limit dashboard user access to resources based on the audience (such as customer base location, language, and custom attributes). Users with this level of access typically are responsible for a specific scope within the brand that they’re working on, such as building language-specific content for a multilingual brand. |
Specific dashboard |
Editing a user’s permissions
To edit a user’s current admin, company, or workspace permissions, go to Settings > Company Users, then select their name.
Admin
Admins have access to all features and the ability to modify any company setting. There are also a few things that only admins can do in Braze.
Only admins can:
- Change approval settings
- Add, edit, delete, suspend, or unsuspend other Braze users
- Export Braze users as a CSV
To grant or remove admin privileges, select This user is an admin, then select Update user.
If you remove admin privileges from a user, they won’t be able to access Braze until you assign them at least one company-level or workspace-level permission.
Company
To manage the following company-level permissions for a user, check or uncheck the box next to that permission. When you’re finished, select Update user.
| Permission name | Description |
|---|---|
| Manage company settings | Allows users to modify any company setting. |
| Create and delete workspaces | Allows users to create and delete workspaces. |
Workspace
You can give a user different permissions for each workspace they belong to in Braze. To manage their workspace-level permissions, select Select workspaces and permissions, then choose their permissions manually select or assign a permission set you previously created.
If you need to give a user different permissions for different workspaces, repeat this process as many times as needed. For a description of each permission, see List of permissions.
Under Workspaces, choose one or more workspaces from the dropdown. Then, under Permissions choose one or more permissions from the dropdown. They will be assigned these permissions only for the workspaces you have selected. Optionally, you can select Enable Admin Access if you’d like to give them full permissions for this workspace instead.
When you’re finished, select Update user.
Under Workspaces, choose one or more workspaces from the dropdown. Then, under Permission Sets, choose one permission set. They will be assigned these permissions only for the workspaces you have selected.
When you’re finished, select Update user.
Exporting user permissions
To download list of your users and their permissions, go to Settings > Company Users, then select Export Users. A CSV file will be sent to your email address shortly.
List of permissions
As of April 2024, to create or update promotion code lists, Braze users need the “Access Campaigns, Canvases, Cards, Segments, Media Library” permission.
| Level | Name | Definition |
|---|---|---|
| Admin | Admin | Allows users to access all available features. This is the default setting for all new users. Can update company settings (company name and time zone), which limited users cannot do. |
| Company | Create and delete workspaces | Allows users to create and delete workspaces. |
| Company | Manage company settings | Allows users to modify any company setting. |
| Workspace | Access Campaigns, Canvases, Cards, Content Blocks, Feature Flags, Segments, Media Library, Locations, Promotion Codes, and Preference Centers | Allows users to view campaign and Canvas performance metrics, create and duplicate drafts of campaigns and Canvases, edit campaign and Canvas drafts and templates, view drafts of News Feed, segments, templates and media, create templates, upload media, create or update promotion code lists, view engagement reports, and view global message settings in the dashboard. However, users with this permission cannot pause or edit existing live content. |
| Workspace | Access Dev Console | Allows full access to the following settings and logs: |
| Workspace | Approve and Deny Campaigns | Allows users to approve or deny campaigns. The approval workflow for campaigns must be turned on for this permission to apply. This setting is currently in early access. Contact your account manager if you’re interested in participating in the early access. |
| Workspace | Approve and Deny Canvases | Allows users to approve or deny Canvases. The approval workflow for Canvases must be turned on for this permission to apply. |
| Workspace | Edit Currents Integrations | Allows users to modify a Currents connection, including credentials. By default, users assigned the “External Integrations” permission are also assigned this permission. |
| Workspace | Edit Segments | Allows users to create and edit segments. You can still create campaigns with existing segments and filters without this permission. You need this permission to generate a segment from users in a CSV or retarget the group of users in the CSV. |
| Workspace | Export User Data | Allows users to export their user data from segments, campaigns, and Canvases. This permission includes sensitive user information like names, email addresses, and other collected personally identifiable information (PII). |
| Workspace | Import and Update User Data | Allows users to import CSV and update files of app users as well as view the User Import page. This also allows you to edit the subscription status of a user and their subscription group opt-in/opt-out rules. |
| Workspace | Launch Content Blocks | Allows users to launch Content Blocks. |
| Workspace | Launch Preference Centers | Allows users to launch preference centers. |
| Workspace | Manage Apps | Allows users to edit App Settings. |
| Workspace | Manage Catalogs Dashboard Permission | Allows users to create and manage catalogs. |
| Workspace | Manage Dashboard Users | Allows non-admins the ability to view, edit, and manage the Company Users page, and manage the dashboard users in their workspace by modifying the permissions of any user, including themselves. Users with this permission can’t delete users (only administrators can delete users). |
| Workspace | Manage Email Settings | Allows users to save email configuration changes (Settings > Email Preferences). |
| Workspace | Manage Events, Attributes, Purchases | Allows users to edit custom attributes (users without this capability can still view custom attributes), edit and view properties of custom events, and edit and view properties of products under Data Settings. |
| Workspace | Manage External Integrations | Allows access to all tabs under Technology Partners and the ability to sync Braze with other platforms. |
| Workspace | Manage Feature Flags | Allows users to create or edit feature flags. |
| Workspace | Manage Media Library Assets | Allows users to add, edit, and delete media library assets. |
| Workspace | Manage Subscription Groups | Allows users to create and manage subscription groups. |
| Workspace | Manage Tags | Allows users to edit or delete tags (under Tag Management). You do not need this permission to add tags to campaigns or segments. |
| Workspace | Manage Teams | Allows users to manage Internal Teams. The ability to select this permission depends on your contract with Braze. |
| Workspace | Manage Transformations | Allows users to create and manage Data Transformations. |
| Workspace | Publish Cards | This permission is only visible if your account is enabled for News Feed, which is being deprecated. This does not affect Content Cards. Allows users to create and edit News Feed cards. You can still view News Feed cards without this permission. If your account is enabled for News Feed and a user should be able to launch existing Content Blocks, they need both “Publish Cards” and “Launch Content Blocks” permissions. |
| Workspace | Send Campaigns, Canvases | Allows users to edit, archive, and stop campaigns and Canvases, create campaigns, and launch Canvases. |
| Workspace | View Billing Details | Allows users to view subscriptions and billing. |
| Workspace | View Currents Integration | Allows users to view all information about a Currents connection, excluding credentials. By default, users assigned the “Access Campaigns, Canvases, Cards, Content Blocks, Feature Flags, Segments, Media Library, Locations, Promotion Codes, and Preference Centers” permission are also assigned this permission. |
| Workspace | View Custom Attributes Marked as PII | Allows non-admin users to view custom attributes that contain sensitive information and are marked as personally identifiable information (PII). |
| Workspace | View PII | Allows users to view personally identifiable information (PII) fields as defined by your company within the dashboard. Users can also view PII fields in the Preview as a User tab of message previews. |
| Workspace | View User Profiles PII Compliant | Allows users to view user profiles that contain fields your company has defined as personally identifiable information (PII), but redacts the PII fields. |
| Workspace | View Transformations | Allows users to view Braze Data Transformations. |
| Workspace | View Usage Data | Allows users to view app usage, including the channel performance dashboards. |
| Workspace | Merge Duplicate Users | Allows users to merge duplicate user profiles. |
| Workspace | Preview Duplicate Users | Allows users to preview which user profiles are duplicated. |
| Workspace | Create and Edit Canvas Templates | Allows users to create and edit Canvas templates. |
| Workspace | View Canvas Templates | Allows users to view Canvas templates. |
| Workspace | Archive Canvas Templates | Allows users to archive Canvas templates. |
| Workspace | Manage Custom Event Property Segmentation | Allows users to create segments based on event property recency and frequency. |
Edit this page on GitHub