DESelect requires users to have certain Automation Studio permissions. However, it's possible to give your users these permissions without giving them certain access to the Automation Studio app in Marketing Cloud.
We suggest creating a role with the required permissions and assigning this role to the DESelect users.
In this example, we will grant permission to a DESelect user to access all Salesforce Marketing Cloud apps except for some restrictions on Automation Studio such as accessing SQL Query Activities and viewing automations but not be able to create, edit and delete.
1. Create Role:
- In Salesforce Marketing Cloud, go to: Setup > Administration > Users > Roles
- Click Create
- Under Name, enter DESelect User with restrictions to Automation Studio
- Assign the following permissions:
- Automation Studio:
- Access: allow
- Create: deny
- Create, Edit, Execute: deny
- Delete, Execute: deny
- Execute (API): allow
- Migration Utility: allow
- Automation Studio:
- Subscriber: allow all
- Data Extension: allow all
- Data Relationship: allow all
- Salesforce Data Extension: allow all
- Query: allow all
- Shared Folders:
- Shared Data Extension Folders: allow all
- Shared Salesforce Data Extension Folders: allow all
- Journey Builder:
- Automation: allow all
- Email Send Wizard:
- Audience: allow all
- Advanced Options: allow all
- Click Save
2. Assign DESelect User with restrictions to Automation Studio role to users
- In Salesforce Marketing Cloud, go to: Setup > Administration > Users > Users
- Check the checkbox next to the user you want to assign the DESelect role to. Then click Manage Roles
- Click Edit Roles
- Choose DESelect User with restrictions to Automation Studio and click Save
- Repeat steps 2-5 for all DESelect users
While assigning the DESelect User with restrictions to Automation Studio role to users, make sure they do not have permissions from other roles that overwrite the DESelect User with restrictions to Automation Studio permissions. In such a case, a user with conflicting permissions might get an 'API Permission Failed' error.
Also, Giving DESelect users the required Salesforce Marketing Cloud permission article might be helpful to you.