🚀 Onboarding
Different User Roles

Different User Roles in Prism

Understanding Prism's Role-Based Access Control (RBAC)

Prism uses a two-part system:

  • Access levels: where a user can go (organization-wide or brand-specific)
  • Roles: what permissions they have once there

Think of it like a company: the organization is the company itself, and brands are its departments. Some people need access everywhere, others only to certain departments.

Access Levels in Detail

Access levels determine which parts of Prism a user can see and interact with. There are two main levels:

Organization Access

Think of this as having company-wide access. Users with Organization access can work with all brands under their organization, similar to how a company executive can oversee all departments. For example, if you're heading digital marketing at a brand, you might have organization access to oversee all brands across different regions.

Brand Access

This is like having department-specific access. Users with brand access can work only with specific brands they've been assigned to. For instance, a media buyer might only need access to the US brand, just as a department manager focuses only on their specific department's operations.

Users Roles at Organization and Brand level

Organization Level Roles

At the organization level, there are two distinct roles:

Organization Admin:

  • Has full control over the organization and all its brands
  • Can create and manage all brands and users across the organization
  • Has access to organization settings and billing information
  • Perfect for digital marketing heads and marketing ops leads
  • Automatically gets admin access to all brands

Organization Member:

  • No access to organization settings
  • Roles are defined at the brand level
  • Can access specific brands they're assigned to
  • Hence, every Organization Member should have at least one Brand Role assigned to them

Brand Level Roles

At the brand level, there are three specific roles:

Brand Admin:

  • Manages brand settings and access for all brand users
  • Can invite users to their brand
  • Ideal for brand managers and media managers

Brand Publisher:

  • Can publish outputs on ad platforms generated using Prism
  • Cannot manage user access or brand settings
  • Perfect for media buyers and account managers

Brand Viewer:

  • Views brand-specific reports and data
  • Cannot publish any changes through Prism
  • Great for analysts and stakeholders who need to monitor performance

Important Things to Remember

Some key points about how roles work in Prism:

  • Users can only have one role at each access level
  • Organization Admins automatically get admin access to all brands
  • Brand-level roles can be different for each brand
  • You cannot modify your own role for security reasons
  • Always assign the minimum necessary access for security
  • Users with any Brand role will automatically be assigned the Organization Member role by default

Next Steps

Once you understand the role system, you might want to explore:

Connect Your Ad AccountsManage User Access