At a glance: Add team members to your AppsFlyer account and individually manage their permissions to access apps, data, and features.
Account roles and permissions
AppsFlyer accounts have two associated user roles: Admin and team member. Only the admin can create team members and add them to an account.
- Account admin
- One admin per account
- Access to all apps registered in the account
- Sets team member permissions and app access
- Assigns admin capabilities to team members
- Learn more > Changing the account admin
- Team members
- The number of team members depends on the subscription plan; the maximum is 600
- Cannot assign admin permissions to other team members
Every advertiser, agency, or ad network has its own admin and related team members. The table in the following drop-down section lists permissions that the account admin can enable for team members.
Team member permissions per account type
Permissions |
Default status |
Description |
Account | ||
---|---|---|---|---|---|
Advertiser |
Agency (partner) |
Ad network |
|||
Team member |
Disabled |
Add and remove apps: current, future, and/or specific apps |
✓ |
x |
x |
Disabled |
Add, edit, and remove other team members*:
|
✓ |
✓ |
✓ |
|
Disabled |
Edit App settings:
|
✓ |
✓ |
x | |
Disabled |
Edit SKAdNetwork settings |
✓ |
x |
x |
|
Disabled |
Access My plan and Payments |
✓ |
x |
x |
|
App permissions
|
Enabled |
Access all apps now in the account |
✓ |
✓ |
x |
Enabled |
Access all apps added in the future |
✓ |
✓ |
x |
|
Configuration permissions |
Enabled |
Add/edit integrated partners |
✓ |
x |
x |
Disabled |
View, add, and edit Validation Rules** |
✓ |
x |
x |
|
Data access |
Enabled only |
Access to aggregate data |
✓ |
✓ |
x |
Enabled |
Access to raw data |
✓ |
✓ |
x |
|
Disabled only |
Access to Pull API key Note: As needed, admin can provide a Pull API key to team members |
Admin |
Admin |
x |
|
* Team members with the capability to "Add and edit team members" can only be edited by the account admin. ** See Validation Rules for integrated partners for further details about agency and ad network access to Validation Rules. |
Adding team members
Note
A team member's email address can be associated with only one AppsFlyer account.
- If you receive a message that a user can't be created, it usually means that their email address already appears in the AppsFlyer system. (Perhaps they were eager to get started and signed up on their own!)
- Not to worry, it's easy to fix: Just contact your Customer Success Manager (CSM), or send a quick email to our Customer Engagement team at hello@appsflyer.com.
Advertiser and agency accounts
To add a team member:
- Click the email address on the right side of the header bar.
- Select Team members from the dropdown list.
- On the Team members page, click +Add team members.
- Complete the Create a new member section:
- Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore (_), and/or quotation marks (‘ or “).
- Email:
- Email addresses cannot include an apostrophe (').
- A team-member email address can only be associated with a single AppsFlyer account.
- If the address is already used in another AppsFlyer account, this message appears: Can't create this user.
- Department
- Grant admin capabilities [Default: Access is disabled]
Enable permissions as needed:- Add and remove apps in the account
- Add and edit team members
- Edit App settings page
- Access My plan and Payments
- View, add, and edit Validation Rules
- Grant app permissions [Default: Access is enabled]
Team members have access to all apps and all future apps in the account.
Team member access options include the following:- Option 1: Use the default setting (option to Reset to default)
- Select all apps and Include all future apps that are enabled.
- Access to all apps in the account and any added in the future.
- Option 2: Enable Select all apps, but disable Include all future apps.
- Access to all apps currently in the account.
- No access to apps added in the future (admin can change this status).
- Option 3: Disable Select all apps
- No access to any apps in the account.
- If Select all apps is disabled, then access to Include all future apps is automatically disabled.
- Option 4: Disable Select all apps and then select specific apps
- Only has access to apps marked by checkmarks.
- Option 1: Use the default setting (option to Reset to default)
- Manage data permissions [Default: Access is enabled]
Raw data access: Enable/disable access as needed. - Click Save.
- Return to Team members page.
- New team member receives an email invite and needs to activate their account.
Ad network account
To add an ad network team member:
- Click the email address on the right side of the header bar.
- Select Team members from the drop-down list.
- On the Team members page, click +Add team members.
- Complete the Create a new member section:
- Name: Use letters, numbers, spaces, period (.), hyphen (-), underscore,(_), and quotation marks (‘ or “).
- Email:
- Email addresses cannot include an apostrophe (').
- A team member's email address can only be associated with a single AppsFlyer account.
- If the address is already used in another AppsFlyer account, then this message appears: Can't create this user.
- Department
- Grant admin capabilities [Default: Access is disabled]
- Option: Add and edit team members
- Click Save.
- Return to Team members page.
- New team member receives an email invite and needs to activate their account.
Account activation
Newly-added team members receive an email invite.
To activate a team member account:
- In the email invite, click Activate My AppsFlyer Account.
Note! The link is valid for 48 hours. If it expires, ask the admin to resend the email invite. - Enter a password. Requirements are shown during password creation.
- Click Log in.
Resend an email invite
To activate their account, newly-added team members must respond to the initial email invite within 48 hours. If it expires, the admin can resend the invite.
[Admin] To resend an email invite:
- Click the email address on the right side of the header bar.
- Select Team Members from the drop-down list.
- Search for the team member row (column sort or search field).
- Click Actions > Resend email invite.
Managing team members
Give access permissions
An advertiser can give ad network/agency admins and team members permissions to their account to access information, configure integrations and in-app events, etc. Learn more
To give an ad network/agency team member access to an advertiser account:
- Ad network/agency must make sure the designated team member has an account. If not, an account must be set up.
- When a new account is set up, the team member must activate it via an activation email.
- Ad network/agency must give the team member's email address to the advertiser.
- Advertisers, within their account, must add the team member to a specific ad network/agency. If the ad network/agency team member doesn't have an account (see Step 1), then the advertiser will receive an error message.
Modify permissions
To modify team member permissions:
- Click the email address on the right side of the header bar.
- Select Team members from the drop-down list.
- Search for a team member (column sort or search field).
- Click on the team member's name or, under Actions, click Edit team member details.
- Update settings. Available settings depend on the type of account.
- Click Save.
Note
To change integrated partner (ad network/agency) permissions, go to Configuration > Integrated Partners. Learn more
Access raw data
To enable/disable team member access to raw data:
- Click the email address on the right side of the header bar.
- Select Team Members from the drop-down list.
- Search for a team member (column sort or search field).
- Click on the team member's name or, under Actions, click Edit team member details.
- Go to Manage data permissions > Raw data access and enable/disable access to raw data.
- Click Save.
Restrict integrated partner configuration
The admin and team members who can add/edit other team members have the necessary permissions to restrict or allow other team members from adding or editing integrated partners. Exceptions are noted in the below table.
Permission to configure (add/edit) integrated partners |
---|
Admin manages which team members can configure integrated partners.
|
Team members who can add/edit other team members can restrict/allow other team members' ability to configure integrated partners.
|
Team members who can add/edit other team members BUT are themselves restricted from adding/editing integrated partners.
|
Restrict access
To restrict a team member from configuring integrated partners:
- Turn off Add/edit integrated partners
Restricted team members:
- Can select and view an integrated partner via Configuration > Integrated partners page
- Have view-only access to an integrated partner's setting tabs
- Can't change settings
Allow access
To allow a team member to configure integrated partners:
- Turn on Add/edit integrated partners
Access Validation Rules
To enable/disable team member access to Protect360 Validation Rules:
- Click the email address on the right side of the header bar.
- Select Team Members from the drop-down list.
- Search for a team member (column sort or search field).
- Click on the team member's name or, under Actions, click Edit team member details.
- Go to Restrict configuration permissions > View, add, and edit Validation Rules, and enable/disable access to Validation Rules.
- Click Save.
Limit data access
It is possible to restrict advertiser team member access to data; their access will be limited to 1 or more media sources (ad networks/agencies) and/or Geo (country/region).
Default status: Access to all media sources and countries (Geo).
To limit data access:
- Go to Team members > Add member > Manage data permissions > Limit data access.
- Set limitations:
- Media sources: Mark Selected and select one or more media sources
- Organic: To permit access to organic data, select Organic from the list of media sources
- Geo: Mark Selected and choose one or more countries
- Click Save.
Result: Team members can only access specified data. Access to previously accessible data is revoked, except for the exceptions listed below.
Dashboards not available to restricted team members
The following dashboards aren't available to restricted to team members: SKAdNetwork, Protect360, Activity, Retention, Cohort, Custom, People-Based Attribution, Audiences, and Incrementality.
Available dashboards and reports
The following are available to restricted team members.
Dashboard/report/page | Details |
---|---|
Dashboards |
|
Raw data report |
Admin must enable access to raw data |
Performance report |
|
Retargeting report |
|
App settings (read-only access) |
|
Integrated partners |
Team members can only access and configure the media sources they are restricted to. |
SDK integration test |
|
Limitations
Limitation | Details |
---|---|
Custom media sources |
|
Live alerts |
Team members with media source and/or Geo-access limitations still receive configured live alerts that they previously had permissions for. Admin can manually remove live alerts. |