Role/User Type Interactions
There are three elements of the TapClicks platform that together identify both the functions that a user can do within the platform and on which record(s) the user can act. These elements are:
- User type
- TapAnalytics/TapReports role
- TapOrders/TapWorkflow role
These three elements combine to provide a flexible model where user access can be controlled at a granular level. The combination of particular user types with TapOrders/TapWorkflow roles results in the full set of what a user can access and for whom.
User Types
The users types apply to users platform wide.
- SuperAdmin
-
- Access to all areas of the platform. Intended for an administrative level user.
-
- Business Unit Admin
-
- Access to clients, data sources, accounts specific to a particular business unit.
- May have access to edit/create/assign dashboards and Report Studio files.
- May clone shared items like dashboards, Report Studio, data profiles from a non-BU specific version and make it specific to their business unit.
- May have access to Map BU clients to specific data source accounts.
- May be able to connect up new data sources that are specific to their BU.
- Can access clients and client groups that are assigned to their business unit.
- Can administer other users within their business unit.
- Cannot access anything that impacts other business units.
-
- Agent
-
- Secured to list of clients who are members of the client group assigned to the user.
- Read only access to dashboards and Report Studio files.
- Can export reports and setup scheduled reports.
- OFrn used for salespeople, campaign managers or even clients who have multiple client records they need to access but otherwise cannot make modifications.
- Cannot add/manage/map clients or users.
-
- Client
-
- Access to specific dashboards that are made available via the assigned data profile.
- Read only access to only the data for the client record to which they are assigned.
- Can change their own password and select their own home page.
-
Role Based Access Control
TapClicks has a single, unified platform role-based access control (RBAC).
TapOrders & TapWorkflow Roles
These roles are specific to TapOrders and TapWorkflow.
- SuperAdmin - Billed as Ad Operations
-
- Access to all configuration and access to all business units, customers, orders, line items, tasks and functions.
-
- Ad Operations Manager - Billed as Ad Operations
-
- Access to all orders, tasks based on their assigned TapReports business unit.
- Access to queues based on their assigned queue list.
- Access to Queue Manager page to manage workload.
-
- Ad Operations - Billed as Ad Operations
-
- Access to orders, line items, queues, tasks.
- Role uses TapReports business unit assignment to automatically select business unit.
- Access to queues based on their assigned queue list.
-
- Sales - Billed as Sales
-
- Access to only orders assigned to their salesperson ID.
- Access to all line items for their orders, and queues based on their assigned queue list.
- Role uses TapReports business unit assignment to automatically select business unit.
- Can only edit orders (and its line items) that are editable. An order is editable if its status is draft.
-
- Sales Manager - Billed as Sales
-
- Access to orders, line items, queues, tasks.
- Role uses TapReports business unit assignment to automatically select business unit.
- Access to queues based on their assigned queue list.
- Can edit orders and line items without restriction.
-
- Sales Support - Billed as Sales
-
- Access to orders, line items, queues, tasks.
- Role uses TapReports business unit assignment to automatically select business unit.
- Access to queues based on their assigned queue list.
- Can only edit orders (and its line items) that are editable. An order is editable if its status is draft.
-
- Vendor - Not Billable
-
- Vendors have access to My Tasks, My Queues and their assigned queues.
- Vendors cannot link back to orders or line items and cannot see the other products sold on an order.
-
- Vendor Restricted - Not Billable
- Vendor Restricted can access only My Tasks. They must explicitly be assigned individual tasks and cannot work out of queues.
- Partner - Not Billable
-
- Partners have access to My Tasks.
- They do NOT have access to QUEUES.
- Partners CAN link back to orders or line items they are associated with and can see the other products sold on an order.
-
- Sales Viewer - Not Billable
-
- Read only access to orders. No access to Workflow, My Tasks or My Queues.
- No access to detailed orders.
-
- Viewer - Not Billable
- Finance - Not Billable
- Client - Not Billable
Common Combinations of Roles and User Types
- SuperAdmin/Campaign Manager/AdOps Manager
- SuperAdmin/Ad Operations
- Agent/Campaign Manager
- Agent/Salesperson
- Client/Client
- Agent/Client (multi-location client)
- BU Admin/Ad Operations (agency of managed service provider)
- Market Administrator - BU Administrator/Ad Operations Manager
- Sales Support person in market - BU Administrator/Sales