--- title: "About User Management" canonical: "https://hub.freewheel.tv/space/OS/114688005/About%20User%20Management" format: markdown --- Overview User management covers two areas: User accounts (or simply users ): The creation of new users and the management of existing users (global settings and data access level). User roles: Each user is assigned a user role, which defines the permissions and access of all users with the same user role. For example, an advertising agency might create a "Media Buyer" user role with permissions specific to campaign management, or a "Finance Manager" user role with permissions specific to finance-related areas. Any changes to the "Media Buyer" or "Finance Manager" user role changes the permissions for all users assigned that user role. OneStrata User Terms and Concepts This section contains information about terms and concepts related to users. Types of Users  There are two types of users: User Type Description Agency User A user that works directly for the advertising agency in some way. For example, as a media planner or buyer. Agency users do not have access to Vendor Inbox.   Seller User If the Internal Seller workflow is enabled: An enterprise can create Seller users. Otherwise, only Agency users can be created. An Agency user can be changed into a Seller user. However, a Seller user cannot be changed into an Agency user. A user that works for the advertising agency's internal trade desk, if any. Seller users are like Agency users, but have the following additional abilities: Can access Vendor Inbox Can view, confirm, and decline internal orders (orders that were sent to an internal seller Order Partner ) User Data Access Level Each user must be assigned a data access level, which is a combination of media access level and entity access level. Media access and entity access define which campaigns a user can view or edit: Data Access Level Description Media access level If a user does not have access to a particular Media type, they cannot view or edit campaigns associated with that Media type. Entity access level If a user does not have access to a particular Enterprise, Agency, Business Unit, Client Group, or Client entity , they cannot view or edit campaigns associated with that entity or any of its children entities. In general, each user's data access level must be manually assigned. However, there are two FreeWheel-managed settings that can automatically assign full access to new users: If the Apply All Medias to New Users setting is enabled, all new users are automatically assigned access to all Media types. If this setting is not enabled, new users must have their media access level manually assigned. If the Apply All Entity Access to New Users setting is enabled, all new user are automatically assigned access to all entities. If this setting is not enabled, new users must have their entity access level manually assigned. For more information, see FreeWheel-Managed Settings and Features . To enable either or both of these settings, contact your OneStrata representative. User Role Terms and Concepts This section contains information about terms and concepts related to user roles. Types of User Roles There are two types of user roles: User Role Type Description Default user role Default user roles are automatically created and defined by FreeWheel, and provide a quick way to assign permissions to users. Custom user role If User Role Customization is enabled, an enterprise can customize user roles. Otherwise, the default user roles cannot be edited and custom user roles cannot be created. The permissions of a custom user role are manually determined by the creator of the user role. Default User Roles Types of Default User Roles There are three types of default user roles: Default User Role Type Description OneStrata Digital Default user roles for advertising agencies that use OneStrata Digital. Traditional Default user roles for advertising agencies that use one or more traditional Strata applications RFP View SBMS Eleven sTraffic Agency Qualitative XSale Xtrend Cable Zone Management Strata Link Combined For advertising agencies onboarded after April 8th, 2026, default user roles that use both OneStrata Digital and traditional Strata applications. Prior to April 8, 2026, agencies using OneStrata Digital and one or more other Strata applications have both OneStrata Digital and Traditional user roles available by default: Product Usage OneStrata Digital Default User Roles Traditional Default User Roles Agencies that use OneStrata Digital and one or more other Strata applications ✓ ✓ Agencies that don't use OneStrata Digital but do use other Strata application(s) X ✓ Agencies that use OneStrata Digital but don't use other Strata applications ✓ X Default OneStrata Digital User Roles The following table describes the default OneStrata Digital user roles: Default User Role Description All Permissions Full permissions for all OneStrata Digital areas. Standard User Full permissions for the core campaign management workflow. View-only permissions for all other areas. Trainer Full permissions for almost all areas. No access to vendor contact information and view-only access for external integration administration. View Only View-only permissions for all areas. Digital Buyer Full permissions for the Campaign Management module. View-only permissions for all other areas. Traffic Only Full permissions for the External Integrations tab. View-only permissions for all other areas. Finance Only Full permissions for finance-related areas. View-only permissions for all other areas. Agency Administrator Full permissions for the Finance, Reports, and Administration modules. View-only permissions for all other areas. For more information on the exact permissions of each default user role, see Default User Role Permissions Default Traditional User Roles The following table describes the default traditional user roles: Default User Role Description Traditional Traffic Only Only available if the enterprise uses sTraffic Access to sTraffic only, Access to the Traditional Knowledge Base. No user management permissions. Traditional Eleven Only Only available if the enterprise uses Eleven Access to Eleven only. Access to the Traditional Knowledge Base. No user management permissions. Traditional Digital Only Only available if the enterprise uses SBMS Access to SBMS only. Access to the Traditional Knowledge Base. No user management permissions. Traditional Campaign Manager If the enterprise uses these applications, access to SBMS, View, Eleven, and/or RFP. Access to the Traditional Knowledge Base. No user management permissions. Traditional Knowledge Base No access to the traditional Strata applications used by the enterprise. Access to the Traditional Knowledge Base. No user management permissions. Traditional Standard User Access to all traditional Strata applications used by the enterprise. Access to the Traditional Knowledge Base. No user management permissions. Traditional Agency Administrator Access to all traditional Strata applications used by the enterprise. Access to the Traditional Knowledge Base. Full user management permissions. Default Combined User Roles The following table describes the default combined user roles: Default User Role Description Agency Admin Access to all traditional Strata applications used by the enterprise. Access to the Traditional Knowledge Base. Full user management permissions. Full permissions for all OneStrata Digital areas. Strata Default User Access to all traditional Strata applications used by the enterprise. Access to the Traditional Knowledge Base. No user management permissions. Full permissions for the core OneStrata Digital campaign management workflow. View-only permissions for all other areas. Read Only View-only permissions for all OneStrata Digital areas. Access to the Traditional Knowledge Base. No user management permissions. Eleven Only Only available if the enterprise uses Eleven Access to Eleven only. Access to the Traditional Knowledge Base. No user management permissions. sTraffic Only Only available if the enterprise uses sTraffic Access to sTraffic only, Access to the Traditional Knowledge Base. No user management permissions. For more information on the exact permissions of each default user role, see  Default User Role Permissions