Set User Role Permissions

This page contains information about setting access roles for users within your account via the SOAP API.

You can enable or disable access to features and information within your account via roles.

Use the sample code below as a model for your own API call:

The following list defines permissions available to set via the SOAP API. Because not all accounts include all available features, you may not use some roles within your account. Please contact your Marketing Cloud for more information on the features included in your account.

Role IDRole NameDescription
3CLIENT_ADMINCan add users to an account
4PRO_ADMINCan create and view accounts
5VIEW_TRACKINGCan only view tracking information
6CRT_LIST_VIEWCan only view and modify published email messages
7RM_TMPLTCannot access templates
8SEND_EMAIL_OFFCannot send email messages
12DELETE_LIST_OFFCannot delete lists
13PROFILE_READONLYCannot modify profile attributes
14SF_REPORTSCan run Salesforce.com reports
15SF_REPORTS_FULLCan run Salesforce.com reports and retrieve all contacts
16DENY_LIST_ACCESSCannot access lists
17DELETE_EMAIL_OFFCannot delete email messages
18CREATE_EMAIL_OFFCannot create email messages
19EXT_SEND_INTGRNCan link to an external website for email sends
23WebServicesCan use the SOAP API
24ATTRIBS_READONLYCannot modify profile attribute values
25ADMIN_DATA_MANCan access administrative data management
26TEST_SEND_ONLYCan only conduct test sends
28REMOVE_CRMCannot access Marketing Cloud from any external systems
29REMOVE_INTERACTCannot access any interactions
30REMOVE_360Cannot access 3sixty
31SYS_DEF_ADMINEnables user as system-defined admin
32SYS_DEF_CONTENTEnables user as system-defined content creator
33SYS_DEF_DATAEnables user as system-defined data manager
34SYS_DEF_ANALYSTEnables user as system-defined analyst
35MANAGE_DATA_EXTPermits user to manage data extension data and retention policy
38APPROVERAllow user to approve email messages
39SYS_DEF_DS_USERDistributed Sending User