At a glance: An AppsFlyer account has one admin, but can have up to 600 team members. The admin creates team member profiles and manages their permissions (capabilities), access to apps, and data access.
Account roles and permissions
AppsFlyer accounts have two associated user roles: Admin and team member. Only the admin can create team members and add them to an account.
- Account admin
- One admin per account
- Access to all apps registered in the account
- Sets team member permissions and app access
- Assigns admin capabilities to team members
- Learn more > Changing the account admin
- Team members
- Number of team members depends on the subscription plan; the maximum is 600
- Cannot assign admin permissions to other team members
Note
Scenario: The admin is unable to create a new team member!
If a new employee signed up to AppsFlyer—before the admin made them a team member—then their email already exists in the AppsFlyer system. As a result, the admin can't give them account access. The admin must open a support ticket.
Every advertiser, agency, or ad network has its own admin and related team members. The table in the below drop-down section lists permissions that the account admin can enable for team members.
Team member permissions per account type
Permissions |
Default status |
Description |
Account | ||
---|---|---|---|---|---|
Advertiser |
Agency (partner) |
Ad network |
|||
Team member |
Disabled |
Add and remove account apps: current, future, and/or specific apps |
✓ |
x |
x |
Disabled |
Add, edit, and remove other team members*:
|
✓ |
✓ |
✓ |
|
Disabled |
Edit App settings:
|
✓ |
✓ |
x | |
Disabled |
Edit SKAdNetwork settings |
✓ |
x |
x |
|
Disabled |
Access My plan and Payments |
✓ |
x |
x |
|
App access
|
Enabled |
Access all apps now in the account |
✓ |
✓ |
x |
Enabled |
Access all apps added in the future |
✓ |
✓ |
x |
|
Integrated partner |
Enabled |
Add/edit integrated partners |
✓ |
x |
x |
Data access |
Enabled only |
Access to aggregate data |
✓ |
✓ |
x |
Enabled |
Access to raw data |
✓ |
✓ |
x |
|
Disabled only |
Access to Pull API key Note! As needed, admin can provide a Pull API key to team members |
Admin |
Admin |
x |
|
*Team members with the capability to "Add and edit team members" can only be edited by the account admin. |
Adding team members
Note
A team member's email address can only be associated with a single AppsFlyer account. The email address cannot contain an apostrophe (').
If there is an issue adding a team member, contact your Customer Success Manager (CSM) or hello@appsflyer.com.
Advertiser and agency accounts
To add a team member:
- Click the email address on the right side of the header bar.
- Select Team members from the drop-down list.
- On the Team members page > Click +Add team members.
- Complete the Create a new member section:
- Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore (_), and/or quotation marks (‘ or “).
- Email:
- Email addresses cannot include an apostrophe (').
- A team-member email address can only be associated with a single AppsFlyer account.
- If the address is already used in another AppsFlyer account, then this message appears: Can't create this user.
- Department
- Grant admin capabilities [Default: Access is disabled]
Enable permissions as needed:- Add and remove apps in the account
- Add and edit team members
- Edit App settings page
- Access My plan and Payments
- Grant app permissions [Default: Access is enabled]
Team members have access to all apps and all future apps in the account.
Team member access options include the following:- Option 1: Use the default setting (option to Reset to default)
- Select all apps and Include all future apps are enabled.
- Access to all apps in the account and any added in the future.
- Option 2: Enable Select all apps, but disable Include all future apps.
- Access to all apps currently in the account.
- No access to apps added in the future (admin can change this status).
- Option 3: Disable Select all apps
- No access to any apps in the account.
- If Select all apps is disabled, then access to Include all future apps is automatically disabled.
- Option 4: Disable Select all apps and then select specific apps
- Only has access to apps marked by checkmarks.
- Option 1: Use the default setting (option to Reset to default)
- Manage data permissions [Default: Access is enabled]
Raw data access: Enable/disable access as needed. - Click Save.
- Return to Team members page.
- New team member receives an email invite and needs to activate their account.
Ad network account
To add an ad-network team member:
- Click the email address on the right side of the header bar.
- Select Team members from the drop-down list.
- On the Team members page > Click +Add team members.
- Complete the Create a new member section:
- Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore,(_), and quotation marks (‘ or “).
- Email:
- Email addresses cannot include an apostrophe (').
- A team member email address can only be associated with a single AppsFlyer account.
- If the address is already used in another AppsFlyer account, then this message appears: Can't create this user.
- Department
- Grant admin capabilities [Default: Access is disabled]
- Option: Add and edit team members
- Click Save.
- Return to Team members page.
- New team member receives an email invite and needs to activate their account.
Account activation
Newly-added team members receive an email invite.
To activate a team member account:
- In the email invite, click Activate My AppsFlyer Account.
Note! The link is valid for 48 hours. If it expires, ask the admin to resend the email invite. - Enter a password. Requirements are shown during password creation.
- Click Log in.
Resend an email invite
To activate their account, newly-added team members must respond to the initial email invite within 48 hours. If it expires, the admin can resend the invite.
[Admin] To resend an email invite:
- Click the email address on the right side of the header bar.
- Select Team Members from the drop-down list.
- Search for the team member row (column sort or search field).
- Click Actions > Resend email invite.
Managing team members
Give access permissions
An advertiser can give ad network/agency admins and team members permissions to their account to access information, configure integrations and in-app events, etc. Learn more
To give an ad network/agency team member access to an advertiser account:
- Ad network/agency must ensure the designated team member has an account. If not, an account must be set up.
- When a new account is set up, the team member must activate it via an activation email.
- Ad network/agency must give the team member's email address to the advertiser.
- Advertiser, within their account, must add the team member to a specific ad network/agency. If the ad network/agency team member doesn't have an account (see Step 1), then the advertiser will get an error message.
Modify permissions
To modify team member permissions:
- Click the email address on the right side of the header bar.
- Select Team members from the drop-down list.
- Search for a team member (column sort or search field).
- Click on the team member's name or, under Actions, click Edit team member details.
- Update settings. Available settings depend on the type of account.
- Click Save.
Note
To change integrated-partner (ad network/agency) permissions, go to Configuration > Integrated Partners. Learn more
Access raw data
To enable/disable team member access to raw data:
- Click the email address on the right side of the header bar.
- Select Team Members from the drop-down list.
- Search for a team member (column sort or search field).
- Click on the team member's name or, under Actions, click Edit team member details.
- Go to Manage data permissions > Raw data access and enable/disable access to raw data.
- Click Save.
Restrict integrated partner configuration
The admin and team members who can add/edit other team members have the necessary permissions to restrict or allow other team members from adding or editing integrated partners. Exceptions are noted in the below table.
Permission to configure (add/edit) integrated partners |
---|
Admin manages which team members can configure integrated partners.
|
Team members who can add/edit other team members can restrict/allow other team members' ability to configure integrated partners.
|
Team members who can add/edit other team members BUT are themselves restricted from adding/editing integrated partners.
|
Restrict access
To restrict a team member from configuring integrated partners:
- Turn off Add/edit integrated partners.
Restricted team members:
- Can select and view integrated partner via Configuration > Integrated partners page.
- Have view-only access to an integrated partner's setting tabs.
- Can't change settings.
Allow access
To allow a team member to configure integrated partners:
- Turn on Add/edit integrated partners.
Limit data access
It is possible to restrict advertiser team member access to data; their access will be limited to 1 or more media sources (ad networks/agencies) and/or Geo (country/region).
Default status: Access to all media sources and countries (Geo).
To limit data access:
- Go to Team members > Add member > Manage data permissions > Limit data access.
- Set limitations:
- Media sources: Mark Selected and select one or more media sources.
- Organic: To permit access to organic data, select Organic from the list of media sources.
- Geo: Mark Selected and choose one or more countries.
- Click Save.
Result: Team member can only access specified data. Access to previously-accessible data is revoked, except for the exceptions listed below.
Available dashboards and reports
Team members with restricted access can use the following dashboards, reports, and pages.
Dashboard/report/page | Details |
---|---|
Dashboards |
|
Raw data report |
Admin must enable access to raw data |
Performance report |
|
Retargeting report |
|
App settings (read-only access) |
|
Integrated partners |
Team members can only access and configure the media sources they are restricted to. |
SDK integration test |
|
Limitations
Limitation | Details |
---|---|
Custom media sources |
|
Live alerts |
Team members with media source- and/or Geo-access limitations still receive configured live alerts that they previously had permissions for. Admin can manually remove live alerts. |