Managing team members—roles, permissions, and data access

At a glance: Add team members to your AppsFlyer account and individually manage their permissions to access apps, data, and features.

Account roles and permissions

AppsFlyer accounts have two associated user roles: Admin and team member. Only the admin can create team members and add them to an account.

  • Account admin
    • One admin per account
    • Access to all apps registered in the account
    • Sets team member permissions and app access
    • Assigns admin capabilities to team members
    • Learn more > Changing the account admin
  • Team members
    • The number of team members depends on the subscription plan; the maximum is 600 
    • Cannot assign admin permissions to other team members

Every advertiser, agency, or ad network has its own admin and related team members. The table in the following drop-down section lists permissions that the account admin can enable for team members.

Team member permissions per account type

Admin gives permission to team members per account type

 Permissions

Default status

 Description 

Account

Advertiser

Agency (partner) 

Ad network 

Team member

Disabled

Add and remove apps: current, future, and/or specific apps

x

x

Disabled

Add, edit, and remove other team members*: 

  • Update their details
  • Assign/remove apps 

 

Disabled

Edit App settings

  • Loyal-user events
  • Time-zone settings
  • IP masking
  • Retargeting
  • Uninstall measurements

x

Disabled

Edit SKAN settings

x

x

Disabled

Access My plan and Payments

x

x

App permissions

 

 Enabled

Access all apps now in the account

x

 Enabled

Access all apps added in the future

x

Configuration permissions

 

Enabled

Add/edit integrated partners

x

x

Disabled

View/add/edit Validation Rules**

x

x

Disabled

Add/edit OneLink templates

x

x

Data access

Enabled only

Access to aggregate data

x

 Enabled

Access to raw data

x

Disabled only

Access to Pull API key 

Note: As needed, admin can provide a Pull API key to team members

Admin
access only

Admin
access only

x

* Team members with the capability to "Add and edit team members" can only be edited by the account admin.

** See Validation Rules for integrated partners for further details about agency and ad network access to Validation Rules.

Adding team members

 Note

A team member's email address can be associated with only one AppsFlyer account.

  • If you receive a message that a user can't be created, it usually means that their email address already appears in the AppsFlyer system. (Perhaps they were eager to get started and signed up on their own!)
  • Not to worry, it's easy to fix: Just contact your Customer Success Manager (CSM), or send a quick email to our Customer Engagement team at hello@appsflyer.com.

Advertiser and agency accounts

To add a team member:

  1. Click the email address on the right side of the header bar. 
  2. Select Team members from the dropdown list.
  3. On the Team members page, click +Add team members.
  4. Complete the Create a new member section:
    • Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore (_), and/or quotation marks (‘ or “). 
    • Email:
      • Email addresses cannot include an apostrophe (').
      • A team-member email address can only be associated with a single AppsFlyer account. 
      • If the address is already used in another AppsFlyer account, this message appears: Can't create this user. 
    • Department
  5. Grant admin capabilities [Default: Access is enabled]
    Enable permissions as needed: 
    • Add and remove apps in the account 
    • Add and edit team members
    • Edit App and SKAN Settings page
    • Access Payments and My plan pages
  6. Grant app permissions [Default: Access is enabled]
    Team members have access to all apps and all future apps in the account.

    1_Account_status_label.JPG

    Team member access options include the following:
    • Option 1: Use the default setting (option to Reset to default)
      • Select all apps and Include all future apps that are enabled.
      • Access to all apps in the account and any added in the future.
    • Option 2: Enable Select all apps, but disable Include all future apps.
      • Access to all apps currently in the account.
      • No access to apps added in the future (admin can change this status).
    • Option 3: Disable Select all apps
      • No access to any apps in the account.
      • If Select all apps is disabled, then access to Include all future apps is automatically disabled.
    • Option 4: Disable Select all apps and then select specific apps
      • Only has access to apps marked by checkmarks.
  7. Manage configuration permissions
    • Add/edit integrated partners [Default: Access is enabled]
    • View/add/edit Validation Rules [Default: Access is disabled]
    • Add/edit OneLink templates [Default: Access is disabled]
  8. Manage data permissions [Default: Access is enabled]
    Raw data access: Enable/disable access as needed. 
  9. Click Save.
    • Return to Team members page.
    • New team member receives an email invite and needs to activate their account

Ad network account

To add an ad network team member:

  1. Click the email address on the right side of the header bar. 
  2. Select Team members from the drop-down list.
  3. On the Team members page, click +Add team members.
  4. Complete the Create a new member section:
    • Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore,(_), and quotation marks (‘ or “). 
    • Email: 
      • Email addresses cannot include an apostrophe (').
      • A team member's email address can only be associated with a single AppsFlyer account. 
      • If the address is already used in another AppsFlyer account, then this message appears: Can't create this user. 
    • Department
  5. Grant admin capabilities [Default: Access is disabled]
    • Option: Add and edit team members
  6. Click Save.
    • Return to Team members page.
    • New team member receives an email invite and needs to activate their account

Account activation

Newly-added team members receive an email invite.

To activate a team member account:

  1. In the email invite, click Activate My AppsFlyer Account.
    Note! The link is valid for 48 hours. If it expires, ask the admin to resend the email invite.
  2. Enter a password. Requirements are shown during password creation.
  3. Click Log in

Resend an email invite

To activate their account, newly-added team members must respond to the initial email invite within 48 hours. If it expires, the admin can resend the invite.

[Admin] To resend an email invite:

  1. Click the email address on the right side of the header bar.
  2. Select Team Members from the drop-down list.
  3. Search for the team member row (column sort or search field).
  4. Click ActionsResend email invite.

Managing team members

Give access permissions

An advertiser can give ad network/agency admins and team members permissions to their account to access information, configure integrations and in-app events, etc. Learn more

To give an ad network/agency team member access to an advertiser account:

  1. Ad network/agency must make sure the designated team member has an account. If not, an account must be set up.
  2. When a new account is set up, the team member must activate it via an activation email.
  3. Ad network/agency must give the team member's email address to the advertiser.
  4. Advertisers, within their account, must add the team member to a specific ad network/agency. If the ad network/agency team member doesn't have an account (see Step 1), then the advertiser will receive an error message.

Modify permissions

To modify team member permissions:

  1. Click the email address on the right side of the header bar.
  2. Select Team members from the drop-down list.
  3. Search for a team member (column sort or search field).
  4. Click on the team member's name or, under Actions, click Edit team member details.
  5. Update settings. Available settings depend on the type of account.
  6. Click Save.

 Note

To change integrated partner (ad network/agency) permissions, go to Configuration > Integrated PartnersLearn more

Access raw data

To enable/disable team member access to raw data:

  1. Click the email address on the right side of the header bar.
  2. Select Team Members from the drop-down list.
  3. Search for a team member (column sort or search field).
  4. Click on the team member's name or, under Actions, click Edit team member details.
  5. Go to Manage data permissions > Raw data access and enable/disable access to raw data.
  6. Click Save

Restrict integrated partner configuration

The admin and team members who can add/edit other team members have the necessary permissions to restrict or allow other team members from adding or editing integrated partners. Exceptions are noted in the below table. 

Permission to configure (add/edit) integrated partners

Admin manages which team members can configure integrated partners.

  • This reduces the chance of unplanned changes which can, for example, affect attribution, analytics, and resulting expenses.
  • [Default] When the admin creates new team members, they have access to configure integrated partners.

Team members who can add/edit other team members can restrict/allow other team members' ability to configure integrated partners.

  • [Default] When a team member with the above-noted permissions creates a new team member, they have access to configure integrated partners.

Team members who can add/edit other team members BUT are themselves restricted from adding/editing integrated partners.

  • [Default] Can continue to create new team members, BUT any new team members they create cannot configure integrated partners.
  • Cannot change a team member's restrict/allow status; only the admin can change this status.


Restrict access

To restrict a team member from configuring integrated partners:

  • Turn off Add/edit integrated partners

Restricted team members:

  • Can select and view an integrated partner via Configuration > Integrated partners page
  • Have view-only access to an integrated partner's setting tabs
  • Can't change settings

Allow access

To allow a team member to configure integrated partners:

  • Turn on Add/edit integrated partners

Access Validation Rules

To enable/disable team member access to Protect360 Validation Rules:

  1. Click the email address on the right side of the header bar.
  2. Select Team Members from the drop-down list.
  3. Search for a team member (column sort or search field).
  4. Click on the team member's name or, under Actions, click Edit team member details.
  5. Go to Restrict configuration permissions > View/add/edit Validation Rules, and enable/disable access to Validation Rules.
  6. Click Save. 

Add/edit OneLink templates

To enable/disable team member access to OneLink templates:

  1. Click the email address on the right side of the header bar.
  2. Select Team Members from the drop-down list.
  3. Search for a team member (column sort or search field).
  4. Click on the team member's name or, under Actions, click Edit team member details.
  5. Go to Restrict configuration permissions > Add/edit OneLink templates, and enable/disable access to OneLink templates.
  6. Click Save. 

Limit data access

It is possible to restrict advertiser team member access to data; their access will be limited to 1 or more media sources (ad networks/agencies) and/or Geo (country/region).

Default status: Access to all media sources and countries (Geo).

To limit data access:

  1. Go to Team members > Add member > Manage data permissions > Limit data access
  2. Set limitations:
    • Media sources: Mark Selected and select one or more media sources
    • Organic: To permit access to organic data, select Organic from the list of media sources
    • Geo: Mark Selected and choose one or more countries
  3. Click Save.
    Result: Team members can only access specified data. Access to previously accessible data is revoked, except for the exceptions listed below. 

Dashboards not available to restricted team members

The following dashboards aren't available to restricted to team members: SKAdNetwork, Protect360, Activity, Retention, Cohort, Custom, People-Based Attribution, Audiences, and Incrementality. 

Available dashboards and reports

The following are available to restricted team members.

Dashboard/report/page Details
Dashboards
  • Overview
  • Retargeting
  • Events

Raw data report

Admin must enable access to raw data

Performance report

  • Partners

  • Partners by date

  • Daily

  • GEO

  • GEO by date

Retargeting report

  • Partners

  • Partners by date

  • Daily

  • GEO

  • GEO by date

App settings (read-only access)

 

Integrated partners

Team members can only access and configure the media sources they are restricted to.

SDK integration test

 

Available to restricted team members

Limitations

Limitation Details

Custom media sources
(SMS, email, TV, etc.)

  • Custom media sources (SMS, email, TV, etc.) cannot be restricted
  • The dropdown list of media sources only reflects integrated-partners

Live alerts

Team members with media source and/or Geo-access limitations still receive configured live alerts that they previously had permissions for. Admin can manually remove live alerts.

Was this article helpful?