Managing Users

Managing Your User Profile

To access your profile, click "Manage My User" from the account menu at the bottom of the primary navigation.

You'll have access to personal information and usage statistics from the resulting profile page. It doubles as an ID card and a stats card.

You can edit your name and email address. Both fields are required. A phone number is only required for 2FA.

Click the "Change Password" button to change your password.

Resetting Passwords

The password must be reset by the user whose password is being reset. Passwords cannot be reset on behalf of others.

To reset your password, go to Manage My Profile in the account menu and click the Change Password button.

A modal will open, prompting for a new password can be entered.

change password
🚧

Changing a password will immediately invalidate all current sessions across all machines for the user.

Managing Account Users

Click "Manage Users" in the account menu to manage account users.

manage users menu

Modifying User Permissions

User roles define the amount of access and permissions a Lytics user has when logged in and through the Lytics APIs.

A user may have any number of these roles, and the permissions for multiple roles are additive. For example, a user with the Campaign Manager and Content Manager roles will have access to all permissions granted by both roles.

Users with the Admin role can control other users' roles within your organization via the "Manage Users" option from the account dropdown menu.

Predefined Roles and Granular Permissions

When you assign roles to a user, the Manage Users interface presents two tabs:

  • Predefined Roles are the original set of broad, job-function roles, for example Admin, Audience Manager, or Data Manager. Each role bundles permissions across several feature areas. The matrices further down this page describe what each predefined role grants.
  • Granular Permissions is a catalog of narrower roles, each one paired as a view (read-only) and manage (read and write) for a single feature area. Granular permissions are designed for least-privilege assignments where a user should have access only to the features they actually use.

Roles from both tabs can be assigned to the same user. Permissions remain additive across all assigned roles regardless of which tab they come from. For the full granular catalog, common assembly patterns, and notes on custom roles, see Predefined Roles and Granular Permissions.

📘

The matrices below describe predefined roles

The "What does a user of each role have access to?" and "What tasks can a user of each role perform?" sections cover the predefined roles only. Granular permissions are documented on their dedicated page so the matrices stay focused.

Managing Personally Identifiable Information

You can indicate any user fields in your account that contain Personally Identifiable Information (PII) via the private fields account setting. These fields will be hidden for anyone who does not have Admin, Data Manager, or User Search roles. You should verify with Lytics Support that the field hiding in the segment scan is also enabled for your account to ensure these fields are hidden there.

Predefined Role Reference

Each predefined role has a stable slug used in API calls and SSO group assertions, a display name shown in the Manage Users interface, and a purpose. The matrices further down this page show exactly which features each role can access.

SlugDisplay NamePurpose
adminAdminGrants read/write access to all features and management functions, including inviting users and assigning roles.
segment_managerAudience ManagerGrants read/write access to audiences.
campaign_managerCampaign ManagerGrants read/write access to campaigns and audiences without PII, including exporting audiences without PII and publishing campaigns.
content_managerContent ManagerGrants read/write access to content classification, collections, and topics.
data_managerData ManagerGrants read/write access to schemas, queries, users, content, and integrations. Includes PII user fields access.
report_viewerDiscovery InsightsGrants access to explore Discovery insights.
experience_managerExperience ManagerGrants read/write access to Experiences.
flow_read_writeFlow Read/WriteGrants read/write access to Flows.
orchestrateGoal ManagerGrants read/write access to Goals and Experiences features.
marketerMarketerGrants read/write access to audiences and campaigns, but cannot publish campaigns or export audiences.
observerObserverGrants read access to audiences and campaigns.
report_managerReport ManagerCan view, create, and delete audience insight reports.
user_searchUser SearchGrants ability to search for users and view their profiles. Required, alongside the private fields setting, to view PII fields.

What does a user of each role have access to?

A user's role determines which parts of the Lytics app they can access. Here is a breakdown of what is shown in the navigation for each role.

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Dashboard
Dashboardxxxxxxxxxxx
Goals
Goalsxx
Experiences
Experiencesxxx
Audiences
Audiencesxxxxxxxx
Discoveryxx
User Searchxxx
User Profilesxxx
GDPR Profile Deletexx
Content
Overviewxxxx
Topicsxxxx
Collectionsxxxx
Data
Jobs / Authsxxxxx
Data Streamsxx
User Fieldsxx
Queriesxx
Schema Auditxx
Personalizexxxx
Look-a-like Modelsx

For access to look-a-like models you will need to be an account admin or have a combination of Discovery Insight + a role that gives access to Jobs/Auths.

What tasks can a user of each role perform?

Roles define a set of permissions the user has, which also dictates what actions they can take in the app and through the APIs. Here is a breakdown of the permissions for each role by feature.

Personally Identifiable Information (PII)

To shield PII from users who should not have access, you will need to use the private fields account setting to mark the profile fields you want to hide from anyone who does not have Admin, Data Manager, or User Search roles.

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Viewxxx

Audiences (without PII)

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Viewxxxxxxx
Createxxxxxx
Editxxxxxx
Duplicatexxxxxx
Deletexxxxx

Content Topics

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Blocklistxx

Content Collections

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Viewxxxx
Createxxx
Editxxx
Duplicatexxx
Deletexx

Authorizations (for imports & exports)

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Viewxxxxx
Createxxxxx
Editxxxxx
Deletexxxxx

Jobs (imports & exports)

The former "Integrations" tab is now comprised of the "Jobs" and "Authorizations" sections, which allow you to manage your import and exports.

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Viewxxxxx
Createxxxxx
Pausexxxxx
Updatexxxxx
Deletexxxxx

Accounts & Users

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Invite Userx
Manage User Rolesx
Create Accountx
Edit Accountx
View Account Usagex

Personalize Campaigns

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Viewxxxx
Createxxx
Editxxx
Duplicatexxx
Deletexx

Additional API-Only Features

All roles have API read access to topic rollups, segment collections, and SegmentML. Marked below are the roles with full CRUD access to these features.

AdminAudience ManagerCampaign ManagerContent ManagerData ManagerDiscovery InsightsExperience ManagerGoal ManagerMarketerObserverUser Search
Content Topic Rollupsxxxx
Content Classificationxxxx
Queries APIxx
Segment Collectionsxxxxxxxx
Lookalike Modelsxx
Subscriptionxxx

Inviting Users

Click the Create New button from the user list to invite a new user to the account.

Inviting a new user will prompt for an email address and roles to select the appropriate level of access the user will have within your Lytics account. Upon completing this form, the new user will get an email with a link that will take them to the Lytics account login screen.

Removing Users

From the user list, select the user you wish to delete. You can remove this user from Lytics by clicking the Delete User button from their profile page.