# Role-based access control

# Overview

A role is used to give a user access to resources within an organization.

# Roles

All Intempt organizations have the following roles:

  • Organization owner. Have full read and edit access to everything in the organization. Has access to delete the organization, assign organization admins.

  • Organization member. By default, organization members can view the organization without access to any sub-resources. You can configure additional source permissions for every organization member.

  • Organization admin. Admins have full read and edit access to everything in the organization, including Sources, Destinations, other products, and settings.


# Configure organization member permissions

# PII Access

Intempt does not show detected Personally Identifiable Information (PII) to organization members if the information matches specific PII settings. When PII Access is turned “off”, detected PII is masked for user attributes checked as "PII" in the user attribute configuration page (opens new window)

Organization owners can grant specific individuals or groups access to PII from their "Role" settings page. PII Access only applies to the resources a user or user group can access to; it does not expand a user’s access beyond the original scope. All organization owners have PII access by default.


# Source Access

You can assign read-only or read & write access to the selected sources.

# Read-only

If you assign read-only access, organization members can only read data flowing from the selected sources (other sources are hidden from the user). Read-only access does not permit the organization member to edit the source data. In addition, the user is not able to change events and segments that come from the assigned sources.

# Read & write

If you assign read & write access, organization members can read and edit all data flowing from the selected sources (non selected sources are still hidden from the user). Read & write access permits the organization member to edit the source settings and its derivative data (attributes, events, segments).