How to manage Users' roles and permissions
This article outlines the structure of users' roles.
Content
Overview
This article documents the user roles and permission structures within the Gamoshi Dashboard. These roles control the scope of access, administrative capabilities, and data visibility for every user in the system.
Access & Management
-
Location: You can view and assign roles in the dashboard by navigating to User Module -> Regular Users.
-
Permissions: Role assignments are visible in the Roles column by the services avaiable to the account.
-
Editing Roles: Only users with the Manage Users permission can modify access rights. To update a user's role, locate their entry in the list and click the 'Edit' link in the Roles column.
1. Administrative & Organizational Roles
These roles form the foundation of account governance, defining the organizational structure and managing system access.
Manage Users (Full Administrator)
-
Purpose: Comprehensive account governance and security.
-
Capabilities: Provides complete control over all user types (Regular and Analytics). Holders of this role can invite new members, revoke access, and modify permissions for any user in the organization.
Manage Analytics Users (Partner Admin)
-
Purpose: Delegated administration for external or partner-facing accounts.
-
Capabilities: Restricted to managing the lifecycle of Analytics Users only. This role allows for the creation and management of external partner logins, but cannot alter the permissions of Regular Users.
Business Partners
-
Purpose: Management of organizational structure and multi-tenancy.
-
Capabilities: Grants access to the Business Partner Module. Users can create and organize business entities ("containers") and associate them with specific Advertisers, Inventory sources, and Analytics Users to ensure proper data segregation.
2. Media & Data Roles
These operational roles focus on content ingestion, asset management, and campaign targeting strategies.
Upload to CDN
-
Purpose: Management of static asset hosting.
-
Capabilities: Grants permission to upload Video, Audio, and Image files directly to the Content Delivery Network (CDN) for global hosting.
Upload Stream
-
Purpose: High-quality adaptive video delivery.
-
Capabilities: Enables the uploading and transcoding of video files, preparing them for adaptive bitrate streaming across a wide range of devices.
Data Management
-
Purpose: Control over contextual targeting data.
-
Capabilities: Allows users to view contextual targeting lists and associate them with specific assets or campaigns.
3. Financial Management Roles
These roles control access to sensitive financial data and fee configurations.
Tech Fee
-
Purpose: Management and visibility of Technical Fees.
-
Capabilities:
-
Configuration: Define default Tech Fees at the account or advertiser level.
-
Visibility: Unlocks the ability to view Spend and eCPM metrics alongside the standard Gross Spend and Gross eCPM values.
-
Balance
-
Purpose: DSP Account Balance visibility.
-
Capabilities: Grants the user read-only access to view the remaining balance of a DSP account.
4. Geographic & Location Roles
These roles unlock advanced visualization tools for geographic data.
Geo Location Maps
-
Purpose: Advanced geographic analytics visualization.
-
Capabilities: Grants access to the interactive Map View within the analytics dashboard, allowing users to visualize performance data geographically.
5. Special User Type: Analytics User
Located in: User Module -> Analytics Users
Unlike the "Regular Users" defined above, the Analytics User is a specialized, restricted login type designed specifically for external transparency.
The Concept
Analytics Users act as a "window" into specific data segments. They are restricted accounts provided to third parties (such as clients or vendors) who need limited visibility.
Key Features
-
Data Isolation: Access is strictly siloed. These users can only view analytics data for the Advertisers and Inventory associated with their designated Business Partner.
-
Security (Read-Only): They have no write permissions. They cannot see other clients' data, access campaign management tools, or modify system settings.