Managing team members—roles, permissions, and data access

At a glance: An AppsFlyer account has one admin, but can have up to 600 team members. The admin creates team member profiles and manages their permissions (capabilities), access to apps, and data access.

Account roles and permissions

AppsFlyer accounts have two associated user roles: Admin and team member. Only the admin can create team members and add them to an account.

  • Account admin
    • One admin per account
    • Access to all apps registered in the account
    • Sets team member permissions and app access
    • Assigns admin capabilities to team members
    • Learn more > Changing the account admin
  • Team members  
    • Number of team members depends on the subscription plan; the maximum is 600 
    • Cannot assign admin permissions to other team members

 Note

Scenario: The admin is unable to create a new team member!

If a new employee signed up to AppsFlyer—before the admin made them a team member—then their email already exists in the AppsFlyer system. As a result, the admin can't give them account access. The admin must open a support ticket.

Every advertiser, agency, or ad network has its own admin and related team members. The table in the below drop-down section lists permissions that the account admin can enable for team members.

Team member permissions per account type

Admin gives permission to team members per account type

 Permissions

Default status

 Description 

Account

Advertiser

Agency (partner) 

Ad network 

Team member

Disabled

Add and remove account apps: current, future, and/or specific apps

x

x

Disabled

Add, edit, and remove other team members*: 

  • Update their details
  • Assign/remove apps 

 

Disabled

Edit App settings

  • Loyal-user events
  • Time-zone settings
  • IP masking
  • Retargeting
  • Uninstall measurements

x

Disabled

Edit SKAdNetwork settings

x

x

 

Disabled

Access My plan and Payments

x

x

App access

 

 Enabled

Access all apps now in the account

x

 Enabled

Access all apps added in the future

x

Integrated partner

Enabled

Add/edit integrated partners

x

x

Data access

Enabled only

Access to aggregate data

x

 Enabled

Access to raw data

x

Disabled only

Access to Pull API key 

Note! As needed, admin can provide a Pull API key to team members

Admin
access only

Admin
access only

x

*Team members with the capability to "Add and edit team members" can only be edited by the account admin. 

Adding team members

 Note

A team member's email address can only be associated with a single AppsFlyer account. The email address cannot contain an apostrophe (').

If there is an issue adding a team member, contact your Customer Success Manager (CSM) or hello@appsflyer.com.

Advertiser and agency accounts

To add a team member:

  1. Click the email address on the right side of the header bar. 
  2. Select Team members from the drop-down list.
  3. On the Team members page > Click +Add team members.
  4. Complete the Create a new member section:
    • Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore (_), and/or quotation marks (‘ or “). 
    • Email:  
      • Email addresses cannot include an apostrophe (').
      • A team-member email address can only be associated with a single AppsFlyer account. 
      • If the address is already used in another AppsFlyer account, then this message appears: Can't create this user. 
    • Department
  5. Grant admin capabilities [Default: Access is disabled] 
    Enable permissions as needed: 
    • Add and remove apps in the account 
    • Add and edit team members
    • Edit App settings page
    • Access My plan and Payments
  6. Grant app permissions [Default: Access is enabled]
    Team members have access to all apps and all future apps in the account.

    1_Account_status_label.JPG

    Team member access options include the following:
    • Option 1: Use the default setting (option to Reset to default)
      • Select all apps and Include all future apps are enabled.
      • Access to all apps in the account and any added in the future.
    • Option 2: Enable Select all apps, but disable Include all future apps.
      • Access to all apps currently in the account.
      • No access to apps added in the future (admin can change this status).
    • Option 3: Disable Select all apps
      • No access to any apps in the account.
      • If Select all apps is disabled, then access to Include all future apps is automatically disabled.
    • Option 4: Disable Select all apps and then select specific apps
      • Only has access to apps marked by checkmarks.
  7. Manage data permissions [Default: Access is enabled]  
    Raw data access: Enable/disable access as needed. 
  8. Click Save.
    • Return to Team members page.
    • New team member receives an email invite and needs to activate their account

Ad network account

To add an ad-network team member:

  1. Click the email address on the right side of the header bar. 
  2. Select Team members from the drop-down list.
  3. On the Team members page > Click +Add team members.
  4. Complete the Create a new member section:
    • Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore,(_), and quotation marks (‘ or “). 
    • Email: 
      • Email addresses cannot include an apostrophe (').
      • A team member email address can only be associated with a single AppsFlyer account. 
      • If the address is already used in another AppsFlyer account, then this message appears: Can't create this user. 
    • Department
  5. Grant admin capabilities [Default: Access is disabled]
    • Option: Add and edit team members
  6. Click Save.
    • Return to Team members page.
    • New team member receives an email invite and needs to activate their account

Account activation

Newly-added team members receive an email invite.  

To activate a team member account:

  1. In the email invite, click Activate My AppsFlyer Account.
    Note! The link is valid for 48 hours. If it expires, ask the admin to resend the email invite.
  2. Enter a password. Requirements are shown during password creation.
  3. Click Log in

Resend an email invite

To activate their account, newly-added team members must respond to the initial email invite within 48 hours. If it expires, the admin can resend the invite.

[Admin] To resend an email invite:

  1. Click the email address on the right side of the header bar.
  2. Select Team Members from the drop-down list.
  3. Search for the team member row (column sort or search field).
  4. Click ActionsResend email invite.

Managing team members

Give access permissions

An advertiser can give ad network/agency admins and team members permissions to their account to access information, configure integrations and in-app events, etc. Learn more

To give an ad network/agency team member access to an advertiser account:

  1. Ad network/agency must ensure the designated team member has an account. If not, an account must be set up.
  2. When a new account is set up, the team member must activate it via an activation email.
  3. Ad network/agency must give the team member's email address to the advertiser.
  4. Advertiser, within their account, must add the team member to a specific ad network/agency. If the ad network/agency team member doesn't have an account (see Step 1), then the advertiser will get an error message.

Modify permissions

To modify team member permissions:

  1. Click the email address on the right side of the header bar.
  2. Select Team members from the drop-down list.
  3. Search for a team member (column sort or search field).
  4. Click on the team member's name or, under Actions, click Edit team member details.
  5. Update settings. Available settings depend on the type of account.
  6. Click Save.

 Note

To change integrated-partner (ad network/agency) permissions, go to Configuration > Integrated PartnersLearn more

Access raw data

To enable/disable team member access to raw data:

  1. Click the email address on the right side of the header bar.
  2. Select Team Members from the drop-down list.
  3. Search for a team member (column sort or search field).
  4. Click on the team member's name or, under Actions, click Edit team member details.
  5. Go to Manage data permissions > Raw data access and enable/disable access to raw data.
  6. Click Save

Restrict integrated partner configuration

The admin and team members who can add/edit other team members have the necessary permissions to restrict or allow other team members from adding or editing integrated partners. Exceptions are noted in the below table. 

Permission to configure (add/edit) integrated partners

Admin manages which team members can configure integrated partners.

  • This reduces the chance of unplanned changes which can, for example, affect attribution, analytics, and resulting expenses.
  • [Default] When the admin creates new team members, they have access to configure integrated partners.

Team members who can add/edit other team members can restrict/allow other team members' ability to configure integrated partners.

  • [Default] When a team member with the above-noted permissions creates a new team member, they have access to configure integrated partners.

Team members who can add/edit other team members BUT are themselves restricted from adding/editing integrated partners.

  • [Default] Can continue to create new team members, BUT any new team members cannot configure integrated partners.
  • Cannot change a team member's restrict/allow status; only the admin can change this status.


Restrict access

To restrict a team member from configuring integrated partners:

  • Turn off Add/edit integrated partners. 

Restricted team members:

  • Can select and view integrated partner via Configuration > Integrated partners page.
  • Have view-only access to an integrated partner's setting tabs. 
  • Can't change settings. 


Allow access

To allow a team member to configure integrated partners:

  • Turn on Add/edit integrated partners.

Limit data access

It is possible to restrict advertiser team member access to data; their access will be limited to 1 or more media sources (ad networks/agencies) and/or Geo (country/region).

Default status: Access to all media sources and countries (Geo).

To limit data access:

  1. Go to Team members > Add member > Manage data permissions > Limit data access
  2. Set limitations:
    • Media sources: Mark Selected and select one or more media sources.
    • Organic: To permit access to organic data, select Organic from the list of media sources. 
    • Geo: Mark Selected and choose one or more countries.
  3. Click Save.
    Result: Team member can only access specified data. Access to previously-accessible data is revoked, except for the exceptions listed below. 


Available dashboards and reports

Team members with restricted access can use the following dashboards, reports, and pages.

Dashboard/report/page Details
Dashboards
  • Overview
  • Retargeting
  • Events

Raw data report

Admin must enable access to raw data

Performance report

  • Partners

  • Partners by date

  • Daily

  • GEO

  • GEO by date

Retargeting report

  • Partners

  • Partners by date

  • Daily

  • GEO

  • GEO by date

App settings (read-only access)

 

Integrated partners

Team members can only access and configure the media sources they are restricted to.

SDK integration test

 

Limitations

Limitation Details

Custom media sources
(SMS, email, TV, etc.)

  • Custom media sources (SMS, email, TV, etc.) cannot be restricted.
  • Drop-down list of media sources only reflects integrated-partners.

Live alerts

Team members with media source- and/or Geo-access limitations still receive configured live alerts that they previously had permissions for. Admin can manually remove live alerts.

Was this article helpful?