Step 3: Giving DESelect users required Salesforce Marketing Cloud permissions

A user in Salesforce Marketing Cloud needs to have the required permissions to be able to use all functionalities in DESelect. We suggest creating a role with the required permissions and assigning this role to the DESelect users.

1. Create Role:

• In Salesforce Marketing Cloud, go to: Setup  > Administration  > Users  > Roles
• Click Create
• Under Name, enter DESelect User
• Assign the following permissions:
  • Automation Studio: 
    • General: allow all
    • Automation: allow all
  • Email:
    • Subscribers:
      • Subscriber: allow all
      • Data Extension: allow all
      • Data Relationship: allow all
      • Salesforce Data Extension: allow all
    • Interactions:
      • Activities
        • Query: allow all
    • Shared Folders:
      • Shared Data Extension Folders: allow all
      • Shared Salesforce Data Extension Folders: allow all
• Click Save

2. Assign DESelect user role to users

1. In Salesforce Marketing Cloud, go to: Setup  > Administration  > Users  > Users
2. Check the checkbox next to the user you want to assign the DESelect role to. Then click Manage Roles.
3. Click Edit Roles.
4. Choose DESelect User and click Save.
5. Repeat steps 2-5 for all DESelect users.

Why are these permissions needed?

The permissions related to Automation Studio are needed for DESelect to be able to create and run the Query Activities that contains the SQL queries that DESelect builds in the backend.

The permissions related to Email Studio are needed for DESelect to create and read different types of Data Extensions.

Important Note!

While assigning the users with the DESelect User role, make sure they do not have permissions from other roles that overwrite the DESelect User permissions. In such a case, a user with conflicting permissions might get an 'API Permission Failed' error.

Next: Step 3: Assigning users access to DESelect.