Overview

In OneStrata, user accounts have three important parts:

• General details, like the username and contact information of the user  
• A user role that defines which parts of the OneStrata platform a user can view or edit
• A data access level that defines which campaigns a user can view or edit, based on the media type and entity associated with the campaign(s)

User roles are a general collections of permissions that can be enabled by an advertising agency, and assigned based on functional requirements. For example, an agency might create a "Media Buyer" user role with permissions specific to campaign management, or a "Finance Manager" user role with permissions specific to finance-related areas. Any changes to the "Media Buyer" or "Finance Manager" user role changes the permissions for any and all users assigned to that user role.

The combination of user role and data access level provide a way for agency administrations to customize user permissions and access in a flexible, precise way.

User and User Role Terms and Concepts

This section contains information about terms and concepts related to users and user roles in OneStrata.

User Role Permissions

Each user must be assigned a user role, which is a collection of permissions that define which parts of the OneStrata platform a user can view or edit.

There are two types of permissions:

• Read permissions: If a user has read permissions for a certain part of the UI, they can view it. Otherwise, they cannot.
• Write permissions: If a user has write permissions for a certain action, they can do it. Otherwise, they cannot.

For a list and description of all user role permissions, see User Role Permissions Reference.

Default User Roles

The default user roles are user roles that are pre-defined by OneStrata, in order to provide a quick way to assign the appropriate set of permissions to users.

There are eight default user roles:

• All Permissions: Full permissions for all areas.  
• Standard User: Full permissions for the core campaign management workflow. View-only permissions for all other areas. 
• Trainer: Full permissions for almost all areas. No access to vendor contact information.
• View Only: View-only permissions for all areas.
• Buyer: Full permissions for the Campaigns module. View-only permissions for all other areas.
• Traffic Only: Full permissions for the External Integrations tab. View-only permissions for all other areas.
• Finance Only: Full permissions for finance-related areas. View-only permissions for all other areas.
• Agency Administrator: Full permissions for the Finance, Reports, and Administration modules. View-only permissions for all other areas.

For a list of all default user role permissions, see System Default User Role Reference.

User Data Access Level

Each user must be assigned a data access level, which is a combination of media access level and entity access level.

Media access and entity access define which campaigns a user can view or edit:

• Media access level: If a user does not have access to a particular Media type, they cannot view or edit campaigns associated with that Media type.
• Entity access level: If a user does not have access to a particular Enterprise, Agency, Business Unit, Client Group, or Client entity, they cannot view or edit campaigns associated with that entity or any of its children entities.

In general, each user's data access level must be manually assigned. However, there are two FreeWheel-managed settings that can automatically assign full access to new users:

• If the Apply All Medias to New Users setting is enabled, all new users are automatically assigned access to all Media types. If this setting is not enabled, new users must have their media access level manually assigned.
• If the Apply All Entity Access to New Users setting is enabled, all new user are automatically assigned access to all entities. If this setting is not enabled, new users must have their entity access level manually assigned.

To enable either or both of these settings, contact your OneStrata representative.