Managing Clean Room User Roles
As part of LiveRamp Clean Room organization configuration, account and organization administrators can manage and add new user roles. Roles are combinations of Clean Room permission sets that can be assigned to individual users within an organization.
Note
If your organization works with other products outside of LiveRamp Clean Room in Connect, the roles required to access those products are managed in a separate flow. See "Roles and Restrictions for Connect Users".
Tip
To view your role in your Clean Room organization, click the user icon on the top right-hand side of any screen and select "My Profile". To learn more, see "My Profile".
Clean Room provides a set of optional default roles that can be used as a starting point when setting up your permission structure. To view available roles, from the Administration area of the navigation menu select Clean Room Configuration → Clean Room Roles.
The default roles below can be edited, deleted, or directly assigned to users:
Account Admin: Manage users in all organizations and access full organizational features and data operations.
Organization Admin: Manage users in organizations that the user has access to, and configure and invite partners to clean rooms.
Clean Room Admin: Configure and invite partners to clean rooms and build reports in Intelligence.
Data Scientist: Set up data connections, create and execute queries in clean rooms, and build reports in Intelligence.
Business Analyst: View activities in clean rooms and Intelligence dashboards.
Data Engineer / IT: Set up data connections and configure export/activations to destinations.
The following table defines each type of permission available when creating roles or reviewing default roles:
Category | Role | Description |
|---|---|---|
Organization Manager | Organization Administrator | Users can add/edit roles and add users to any organization the user has access to. |
User Management | User can add/edit roles and add users to the current organization the user is in. | |
Data Import | Data Import Jobs Administrator | Users can create data connections and map schemas. |
Data Import Jobs Read Only | Users can see configured data connections and details, but cannot edit or map schemas. | |
Data Exports | Data Out Admin | Users can configure destination accounts. |
Data Out Read Only | Users can see configured destination accounts but cannot add or edit. | |
Clean Rooms | Clean Rooms Administrator | Users can create clean rooms, configure and manage datasets, trigger question runs, invite users to clean rooms, and manage partner permissions at the clean-room level. |
Clean Rooms Read Only | Users can view clean room details and perform additional individual permissions the user is granted at the clean room level. | |
Question Management | Question Management Administrator | Users can provision individual questions to different accounts, organizations, or clean rooms for any of the three that they are a user in. |
Question Builder | Question Builder Administrator | Users can author queries in Question Builder within a clean room that they have access to. |
Intelligence Builder | Intelligence Admin | Users can build reports and dashboards in Intelligence. If this is unchecked, the user has view-only access to Intelligence. |
Trust Center | Trust Center Administrator | Users can see and download a list of users and their access to clean rooms, as well as dataset usage across all clean rooms. |
Trust Center Read Only | Users can see a list of users and their access to clean rooms, as well as dataset usage across all clean rooms. | |
User List | User List Administrator | Create and manage user lists in clean rooms. |
User List Read Only | View user lists in clean rooms. |
Create a Role
To create a user role:
Tip
You can use the interactive walkthrough demo below to go through the entire process (to go to a full-screen version, click here):
From the Administration area of the navigation menu, select Clean Room Configuration → Clean Room Roles to open the Organization Roles page.
Click .
Enter a role name and role description.
Under each section, select the level of permissions that role should include and then click (a role can have one or more permissionable configurations).
All roles will appear on the Organization Roles page. A role can be modified at any time by selecting Actions → Edit Role.
A role must be assigned to a user at the time of user creation and can be modified at any time. For information on user creation and management, see "Managing LiveRamp Clean Room Users".