User management

There are two stages for creating users. First, the user is created on the platform. Next, the newly created user must activate their account.

Create a user

1. On the Users tab, click the New user button.
2. Enter the user’s name (required):
   • Can include letters, numbers, spaces, periods (.), hyphens (-), underscores (_), and single (') or double (") quotation marks.
   • Other special characters are not allowed.
3. Enter the user’s email address (required):
   • Can include letters, numbers, apostrophes ('), ampersands (&), dollar signs ($), hash symbols (#), hyphens (-), underscores (_), and periods (.)
   • Two consecutive periods (..) and other special characters are not allowed.
   • Must end with a valid email domain.

    Important!

   A user’s email address is what identifies them in the AppsFlyer platform, meaning:

   • It can't later be changed without deleting and recreating the user.
   • It must be a valid email address at which the user can receive emails.
   • It can't be associated with another user in any AppsFlyer account, except for users in beta accounts. If the email address is already in use (either in your account or a different one), you will see the message Can't create this user. Follow the troubleshooting steps below to resolve this issue.
4. Select the user’s department (optional).
5. Select the user’s role (required) – either a predefined role or a custom role you have already created.
6. Select the apps the user can access:
   • The default setting allows access to all current and future apps in the account. To change this setting, use the checkboxes to select and deselect apps.
   • A user can be given access to all future apps only if they have access to all current apps.
7. Select the media sources the user can access. The default setting allows access to all media sources. To change this setting:
   1. Click the All button.
   2. From the dropdown list, select the specific media sources the user can access.
      

      Note 

      • When selecting specific media sources, the users will have access only to partners they are integrated with
      • Access to owned media sources is only available when selecting All media sources. 
      • Certain AppsFlyer dashboards and features are not available to users with limited media source access
8. Select the geos the user can access:
   • The default setting allows access to all geos. To change this setting:
     • Click the All button.
     • From the dropdown list, select the specific geos the user can access.
   • Certain AppsFlyer dashboards and features are not available to users with limited geo access.
9. Click Save to create the user. 

User activation

Users can be added to multiple accounts and assigned to different roles in each account. This helps users work in different accounts without the need to re-enter credentials.

Supported accounts and users

The following accounts support having the same user in multiple accounts:

• Advertiser accounts only
• Accounts that don't use 2FA or SSO

The following limitations apply when adding users to multiple accounts:

• This feature is available only to users with appropriate User management permissions.
• The account owner can exist in only one account. This user can't exist in any other account, even in a different role.
• Users who haven't yet activated their account can't be added to another account.

Add users to multiple accounts

To add the same user to multiple accounts:

1. Log into the account in which you'd like to add the user.
2. From the menu bar, click the email address dropdown > User management.
3. From the Users tab, click New user.
4. Enter the required details, select the role for the user in this account, and click Save.
5. Repeat steps 1-4 to add the users to other accounts.

Users can be edited either one at a time or in groups.

Individual editing

To edit an individual user:

1. On the Users tab, click the Actions button on the far-right side of the user’s row.
2. Select Edit from the menu.
3. Edit user settings as required.
4. All settings other than email address are editable (including role, apps, media sources, and geos).
5. Click Save.

Multi-user editing

Multi-user editing is an efficient way to change the account permissions of several users at one time. Using this feature in combination with the search and filtering capabilities of the Users tab can make it particularly helpful for managing large numbers of users.

To edit multiple users:

1. On the Users tab, select the checkboxes of the user or users you want to edit.
   • Select the checkbox in the column heading to select all visible users.
   • The number of currently-selected users is displayed on the right side of the search box. Note that the account owner cannot be selected and is not included in the number of selected users.
2. A series of buttons displays at the top-right of the table: Role, Apps, Media sources, and Geos.
   • If one or more of the selected users has access to future apps, the Apps button is not available. (See Temp role limitations, below.)
3. Click the button for the permissions you want to change.
4. Make the necessary changes using the dialog box or dropdown lists that are displayed.
   • Remember that your changes apply to all selected users!
5. The edited users are highlighted in the table, and the users appear as they will once the changes are saved. However, you still have the opportunity to review your changes and confirm or cancel them in the next step.
6. Review your changes. Click Save to confirm or Cancel to undo them.

To delete a user:

1. On the Users tab, click the Actions button on the far-right side of the user’s row.
2. Select Delete from the menu.

The process of creating a custom role involves duplicating a predefined role and modifying its capabilities as needed.

To create a custom role:

1. On the left panel of the Roles tab, click on the name of the predefined role with the capabilities most similar to the one you want to create. This is your starting point.
2. Click the Duplicate button in the top-right corner of the screen.

   The display of the right panel changes, allowing you to create the new custom role.

3. Enter a name for the new role you are creating.
   • Note: Once you have saved a custom role, the name of the role cannot be edited.
   • Recommended: Make the name descriptive and easily identifiable later.
4. The permission levels of all editable capabilities are displayed as buttons. Click these buttons to change the permission levels for the new custom role. (Be sure to scroll down to see the full list of capabilities.)
   • Note: Capabilities that do not appear as buttons are not currently editable. To change a user's permission level for a non-editable capability, that user must be assigned a predefined role with the required permission level.
5. When you are satisfied with all of your selections, click the Save role button.
6. The new custom role is displayed in the left panel and can be assigned when creating new users or editing existing users.

To edit a custom role:

1. On the left panel of the Roles tab, click on the name of the custom role you want to edit.
2. Click the Edit button in the top-right corner of the screen.

   The display of the right panel changes, allowing you to edit the role's permissions settings.

   • Note: The name of the role cannot be edited. To change the name of a role, delete it and recreate it with the new name.
3. The permission levels of all editable capabilities are displayed as buttons. Click these buttons to change the permission levels for the new custom role. (Be sure to scroll down to see the full list of capabilities.)
4. When you are satisfied with all of your selections, click the Save role button.
5. The role's permission levels are changed for all new and existing users.

To delete a custom role:

1. On the left panel of the Roles tab, click on the name of the custom role you want to delete.
2. Click the Delete button in the top-right corner of the screen.
3. Confirm that you wish to delete the role.
   • A custom role can be deleted only when there are no users assigned to it. If there are users currently assigned to a custom role, assign these users to a different role before deleting the custom role.

If your account previously used our prior user management system, temp roles were assigned to existing users to ensure that they were brought into the new system with unchanged capabilities.

• Users with the same capabilities were assigned the same temp role.
• Use the features of the Roles tab to review the capabilities of each temp role and a list of users currently in it.

Temp role limitations

Temp roles were designed specifically to allow seamless transition from our prior user management system. As such, they are available only in limited situations:

• Temp roles cannot be assigned to other users (whether new or existing).
• A user with a temp role cannot be assigned a different temp role (though you can change the apps, media sources, and geos to which they have access).
  • Note that a user's access to future apps cannot be changed while the user is in a temp role.
• When a user with a temp role is changed to a predefined role, they cannot be returned to the previously-assigned temp role (or to any other temp role).
• If the last user in a temp role is removed from it, the role will no longer appear in your account.

The following AppsFlyer dashboards are not available to users whose access is limited to specific media sources and geos:

• SKAN overview
• Protect360
• Retention
• People-Based Attribution
• Incrementality

Additionally, the following AppsFlyer features are not available to these users:

• Pivot
• OneLink
• Validation Rules
• Audiences (not available for media source-restricted users; available for geo-restricted users)
• SDK information
• Ad spend ingestion
• Cost ETL

Because all Admins have essentially the same permissions as the account owner, changing the account owner is not usually necessary. But if you find that you must change the account owner, follow these steps to do so.

#1–Send an email request

To begin the process of changing the account owner, send an email request to AppsFlyer from the email of the current account owner.

• Be sure that this is the current account owner's email address as it appears in your AppsFlyer account.
• If the current account owner has left your company, ask your IT team to enable you to send an email from their address.

Include the following information in your request:

Use this sample email as a reference:

#2–Next steps

Once the change has been processed, you'll receive an email notification from AppsFlyer. 

• If you want the prior account owner to continue using your AppsFlyer account, create a new user for them and assign them a new role.
• APIs using token v2 aren't affected by changing the account owner. However, if you'd like to reset the token, go to the API token page and reset it manually after the owner is changed.

If you receive the error message Can’t create this user when entering the email address of a new user, it generally means that the email is already associated with an AppsFlyer user (either in your account or a different one). Follow the steps relevant to your situation:

If the user is in your account:

• Check to see if the user has activated their account. If not, resend the invitation if required.
• If the user has activated their account, ask them to try to log in again using the email address associated with their user. Advise them to follow the Forgot password steps if required.

If the user’s email is used in a different account or you can’t determine the account in which the user’s email is used, select one of the following options:

• Delete them from the other account and add them to yours (requires that either you or the user has the required permissions in the other account); or
• Add them to your account using a different email address. This must be a valid email address at which they can actually receive an email; or
• Contact your Customer Success Manager (CSM) or send an email to our Customer Engagement team at hello@appsflyer.com.

If a new user did not receive their account activation invitation or if they did not activate within 48 hours, you can resend the email as follows:

1. On the Users tab, click the Actions button on the far-right side of the user’s row.
   • Note that the user is still shown with an envelope icon , indicating that they have not yet activated their account).
2. Select Resend email invite from the menu.

If your account uses 2FA, there may be occasions on which you need to reset a user’s 2FA settings. Do so as follows:

1. On the Users tab, click the Actions button on the far-right side of the user’s row.
2. Select Reset 2FA from the menu.

Note: An admin can reset any other admin's 2FA other than their own or the account owner's. To reset the account owner's 2FA, contact the AppsFlyer Support team.