Help CenterBrand-level permissions ensure that users can access only the data relevant to their assigned brands. This includes analytics, campaigns, segments, communication objects and journeys/automations. This is particularly beneficial for:
- Operators managing multiple brands, allowing controlled access for different teams.
- B2B providers offering a branded white-label solution, ensuring client-specific data segregation.
During user account setup, a user is assigned one or multiple brands, defining their access scope. Similarly, during operator account setup, an operator is associated with one or more brands, ensuring their data is securely partitioned.
ℹ️ Click here for further information about assigning brand-level access to a user account.
Enforcing Brand-Level Access Control
Brand-specific access is enforced using three distinct methods, ensuring secure and controlled data access:
1. Cross-Operator Access – Row-Level Security
- Row-Level Security (RLS) is implemented to restrict data access at the database level based on user roles and assigned brands.
- This ensures that an operator’s data is fully segregated, preventing any cross-operator visibility.
- Guarantees data integrity and security, as each operator can only view data relevant to their brand(s).
2. Isolated Tenant Data Store – Dedicated Databases for Operators
- Operators with mid to large accounts may operate within their own dedicated database instance.
- This model provides data isolation on analytics data, ensuring that no cross-operator access is possible.
- Particularly beneficial for enterprise-level operators requiring enhanced data security and autonomy.
3. Intra-Operator Access – Data Filtering for Brand-Specific Access
- Within a single operator’s dataset, data filtering ensures that users only access brands assigned to them.
- Brand-level access controls prevent users from accessing data outside their designated brands.
- This allows a single operator to maintain brand-based segmentation within its own environment.