Migrating to granular permissions
Managing who can access your account and perform specific actions is critical for both security and operational efficiency. To give you more control, Braze is introducing granular permissions, a more flexible and precise way to manage user access across your account.
The migration includes these benefits:
- More precise control: Granular permissions offer more control, better security, and clearer oversight. Users get only the access they need.
- Automatic mapping: All current permissions are mapped automatically to their granular equivalents. Your users keep the same access level unless you change it.
What to review
When migration is planned for your company, your Braze admins will receive emails and in-dashboard banners notifying them of the granular permission migration. To prepare for the migration, we recommend that a Braze admin do the following.
- Identify users, roles, or permission sets that may need to be updated for more tailored access after you migrate to the new permission framework.
- If your company has automated user provisioning using SCIM or compliance tools that rely on permission strings, update them to match the new granular structure.
- Inform your Braze users of any upcoming changes to prevent confusion.
- At the scheduled migration date and time, your company will automatically migrate to granular permissions. No further action is required from company admins.
important:
The ability to update permissions will lock within 15 minutes of the scheduled migration time. This means you can’t change any permissions until the migration is over, which we anticipate taking up to 15 minutes.
Legacy to granular permissions mapping
This table shows how each legacy permission maps to the granular permissions. Refer to this table while updating your permissions. For example, to give a user the same access as the “Manage Email Settings” legacy permission, that user needs to have both the “View Email Settings” and “Edit Email Settings” granular permissions.
| Legacy permissions | Granular permissions | |
|---|---|---|
| Level | Name | Name |
| Admin | Admin | Admin |
| Workspace | Workspace Admin | Workspace Admin |
| Company | Create and delete workspaces | Create and delete workspaces |
| Company | Manage company settings | Manage company settings |
| Workspace | Access Campaigns, Canvases, Cards, Content Blocks, Feature Flags, Segments, Media Library, Locations, Promotion Codes, and Preference Centers | View Campaigns Edit Campaigns Archive Campaigns View Canvases Edit Canvases Archive Canvases View Canvas Templates View Frequency Capping Rules View Message Prioritization View Content Blocks Edit Content Blocks View Custom Attributes View Custom Events View Catalogs View Email Settings View Feature Flags View Segments View Global Control Group View Global Rate Limits View IAM Templates Edit IAM Templates Archive IAM Templates View Email Templates Edit Email Templates Archive Email Templates View Webhook Templates Edit Webhook Templates Archive Webhook Templates View Email Link Templates Edit Email Link Templates View Media Library Assets View Locations Edit Locations Archive Locations View Placements View Promotion Codes Edit Promotion Codes Export Promotion Codes View Preference Centers Edit Preference Centers View Push Settings View Audience Sync Settings View User Merge Records View Dashboard Reports Edit Dashboard Reports Delete Dashboard Reports View Localization Settings View Decisioning Studio Agents Edit Decisioning Studio Agents View Decisioning Studio Audience View Decisioning Studio Agents View Decisioning Studio Conversion Event View Decisioning Studio Guardrails View Decisioning Studio Timing View Decisioning Studio Action Banks View WhatsApp Settings View WhatsApp Flows View WhatsApp Catalog View WhatsApp Message Templates From Meta |
| Workspace | Access Dev Console | View API Keys Edit API Keys View Internal User Groups Edit Internal User Groups Delete Internal Groups View Message Activity Log View Event User Log View API Identifiers View API Usage Dashboard View API Limits View API Usage Alerts Edit API Usage Alerts View SDK Debugger Edit SDK Debugger |
| Workspace | Approve and Deny Campaigns | Approve Campaigns |
| Workspace | Approve and Deny Canvases | Approve Canvases |
| Workspace | Export User Data | Export User Data |
| Workspace | Import and Update User Data | View Import Users Import Users Edit User Data |
| Workspace | Edit Segments | View Segments Archive Segments View Campaigns Edit Campaigns Archive Campaigns View Canvases Edit Canvases Archive Canvases View Canvas Templates |
| Workspace | Launch and Manage Content Blocks | View Content Blocks Edit Content Blocks Archive Content Blocks Launch Content Blocks |
| Workspace | Manage Media Library | View Media Library Assets Edit Media Library Assets Delete Media Library Assets |
| Workspace | Launch Preference Centers | Launch Preference Centers |
| Workspace | Manage Apps | Edit App Settings View Push Settings Edit Push Settings View Message Archiving Settings Edit Message Archiving Settings View Placements Edit Placements Archive Placements |
| Workspace | Manage Catalogs Dashboard Permission | View Catalogs Edit Catalogs Export Catalogs Delete Catalogs |
| Workspace | Manage Custom Event Property Segmentation | View Custom Events View Products Edit Custom Event Property Segmentation Edit Purchase Property Segmentation |
| Workspace | Manage Dashboard Users | Edit Dashboard Users |
| Workspace | Manage Email Settings | View Email Settings Edit Email Settings |
| Workspace | Manage Events, Attributes, Purchases | View Custom Attributes Edit Custom Attributes Blocklist Custom Attributes Delete Custom Attributes Export Custom Attributes View Custom Events Edit Custom Events Blocklist Custom Events Delete Custom Events Export Custom Events View Products Edit Products Blocklist Products |
| Workspace | Manage External Integrations | Edit Technology Partners Edit Cloud Data Ingestion View Canvases View Segments View Catalogs Edit Catalogs View API Keys Edit API Keys |
| Workspace | Manage Multi Language Settings | View Localization Settings Edit Localization Settings Delete Localization Settings |
| Workspace | Manage Subscription Groups | Edit Subscriptions |
| Workspace | Manage Tags | View Tags Edit Tags Delete Tags |
| Workspace | Manage Teams | View Teams Edit Teams Archive Teams |
| Workspace | View Data Transformations | View Data Transformation |
| Workspace | Edit Data Transformations | Edit Data Transformation |
| Workspace | Manage User Data Encryption | Edit Identifier Field-Level Encryption |
| Workspace | Send Campaigns, Canvases | View Campaigns Edit Canvases Launch Campaigns View Canvases Edit Campaigns Launch Canvases View Canvas Templates View Frequency Caps Edit Frequency Caps View Global Control Group Edit Global Control Group View Segments |
| Workspace | View Billing Details | View Billing Details |
| Workspace | View Currents Integrations | View Currents Integrations |
| Workspace | Edit Currents Integrations | Edit Currents Integrations |
| Workspace | View Custom Attributes Marked as PII | View Custom Attributes Marked as PII |
| Workspace | View PII | View PII |
| Workspace | View User Profiles PII Compliant | View User Profiles (PII Redacted) |
| Workspace | View Usage Data | View Usage Data |
| Workspace | Merge Duplicate Users | View User Merge Records |
| Workspace | Create and Edit Canvas Templates | Edit Canvas Templates |
| Workspace | View Canvas Templates | View Canvas Templates |
| Workspace | Archive Canvas Templates | Archive Canvas Templates |
| Workspace | Publish Landing Pages | Publish Landing Pages |
| Workspace | Create Landing Page Drafts | Edit Landing Page Drafts |
| Workspace | Access Landing Pages | View Landing Pages |
| Workspace | Create and Edit Landing Page Templates | Edit Landing Page Templates |
| Workspace | View Landing Page Templates | View Landing Page Templates |
| Workspace | Archive Landing Page Templates | Archive Landing Page Templates |
| Workspace | View Custom AI Agents | View Custom AI Agents |
| Workspace | Edit Custom AI Agents | Edit Custom AI Agents Archive Custom AI Agents |
| Workspace | View Placements | View Placements |
| Workspace | Edit Placements | Edit Placements |
| Workspace | Archive Placements | Archive Placements |
| Workspace | New | View Merge Users |
| Workspace | New | View User Deletion Records |
| Workspace | New | View Banner Templates |
| Workspace | New | Edit Banner Templates |
| Workspace | New | Archive Banner Templates |
| Team | Access Campaigns, Canvases, Cards, Content Blocks, Feature Flags, Segments, Media Library, Locations, Promotion Codes, and Preference Centers | View Campaigns Edit Campaigns Archive Campaigns View Canvases Edit Canvases Archive Canvases View Canvas Templates View Content Blocks Edit Content Blocks View Media Library Assets View Email Templates Edit Email Templates Archive Email Templates View IAM Templates Edit IAM Templates Archive IAM Templates View Webhook Templates Edit Webhook Templates Archive Webhook Templates View Email Link Templates Edit Email Link Templates View Dashboard Reports Edit Dashboard Reports Delete Dashboard Reports View Segments |
| Team | Edit Segments | View Segments Archive Segments View Campaigns Edit Campaigns Archive Campaigns View Canvases Edit Canvases Archive Canvases View Canvas Templates |
| Team | Launch and Manage Content Blocks | View Content Blocks Edit Content Blocks Archive Content Blocks Launch Content Blocks |
| Team | Manage Media Library | View Media Library Assets Edit Media Library Assets Delete Media Library Assets |
| Team | Manage Dashboard Users | Edit Dashboard Users |
| Team | Send Campaigns, Canvases | View Campaigns Edit Canvases Launch Campaigns View Canvases Edit Campaigns Launch Canvases View Canvas Templates View Segments |
Frequently asked questions
Can I opt out of or revert the migration?
Braze does not support reverting the migration. We will support you through the migration and monitor the migration closely to quickly address any issues.
Will existing users lose access to Braze during the migration?
No, there will be no downtime to Braze during the migration. However, updates to permissions will be locked during the migration. We anticipate the migration taking up to 15 minutes for completion.
Edit this page on GitHub
New Stuff!