Users and Permissions

Managing users and permissions is key to ensuring that your team can effectively collaborate while controlling sensitive information and determining which actions can be performed by specific users. In this guide, we'll cover the essentials of permission levels and how to manage access to your Deducto account and projects.

Account-level vs. project-level permissions

Deducto offers two types of permissions: Account-Level and Project-Level. These permissions can be set together, providing flexibility in managing user access. You can choose to set only account-level permissions for broad access or use both account-level and project-level permissions for more granular control.

Account-level permissions

Account-level permissions define access rights that apply across your entire Deducto account, covering all projects. There are four categories:

User: Manage users in the account, such as inviting new users or modifying permissions.
Account: Handle usage quota, invoicing, and overall account settings.
Project: Access and manage all existing projects, or create new projects under the account.
Promotion: Create, modify, and delete promotions for any project.

These permissions are broad and intended for users that need overarching access, such as administrators or senior managers.

To prevent accidentally losing access to your account, Deducto ensures there must be at least one user with full account-level permissions at all times.

Project-level permissions

Project-level permissions are more specific and allow for fine-grained control over access to individual projects. These permissions are divided into two categories:

Project: Manage settings for a specific project.
Promotion: Create and modify promotions within a particular project.

Putting permissions together

Project-level permissions are combined with account-level permissions to determine a user's overall access rights. Any broad account-level permissions are converted to project-level permissions and combined with any project-specific permissions during evaluation. This flexibility enables you to assign general permissions at the account level while restricting or expanding specific permissions at the project level.

For example, you can set up a user to have account-level project and promotion viewing permissions to allow them to see all projects under the account, but only give them project and promotion editing permissions for one specific project. Another example may be to restrict a user to only be able to create, edit, or delete promotions in one project (without the ability to modify the project's configurations or see other projects).

Examples of Common Use Cases:

A marketing manager needs access to all projects but only requires promotion management capabilities. In this case, give account-level project and promotion permissions, but leave account and user permissions to a minimum.
A contractor should only have access to specific projects they are working on, without full account access. Uncheck account-level project and promotion permissions and assign project-level permissions for just those projects.
An intern may only need read-only access to learn about promotions. Assign account-level viewing permissions for promotions, while ensuring no editing or deletion rights, so they can observe all promotions without making any modifications.

Configuring permissions

To set the permissions above, go to the Users tab in the Deducto Dashboard, which lists all users and active invitations along with their permissions, and other details such as last active time. There, you can view and edit (if you have the correct user read and write permissions) a user's account-level and project-level permissions.

Inviting users to your account

To invite a new user to your Deducto account, you need to have the appropriate permissions yourself. The number of users you can invite is determined by your subscription plan, so be sure to check how many user seats are available before proceeding.

Here's how to invite a user:

Navigate to the Users tab in the dashboard.
Click the INVITE button.
Select the permissions to assign the user first, then enter their email address.
The user will receive an email invitation to join the account. Once they accept, they'll have access based on the permissions you've set.

The Users tab also shows any outstanding invitations. You can revoke these invitations at any time, which will render them immediately invalid.