Permission sets control what users can view and edit in Demandbase. You can assign permission sets to multiple users to simplify access management and ensure users have the appropriate permissions for their roles.
Demandbase provides preconfigured permission sets that you can customize. You can also create permission sets for your organization’s specific needs. See Create and Manage Permission Sets.
Admins can also review the permission set audit trail to track changes to permission sets.
Understand Permission Set Areas
Permission sets organize permissions by the following Demandbase areas:
- Analytics
- Orchestration
- Database
- Advertising
- Personalization
- MCP
- Sales
- Settings
- Gen AI
Understand Permission Set Access Levels
When you create or edit a permission set, you can configure the access level for each Demandbase area.
Access Level |
Description |
|---|---|
| Full Access | Users can view and edit all features within the area. |
| Limited Access | Users can access only the selected subsections. Some subsections also allow you to configure view or edit permissions. |
| No Access | Users cannot access the area. |
Configure View Only and Can Edit Permissions
For subsections that support more granular permissions, you can select the following options:
- View Only: Users can view information but cannot edit it.
- Can Edit: Users can view and edit information.
Important: If you select both View Only and Can Edit, Can Edit takes precedence and the user receives edit access
Understand System Permission Sets
Demandbase provides the following preconfigured system permission sets. You can customize each system permission set to meet your organization's access requirements.
General User
| Demandbase Area | Access |
| Analytics | Limited: Everything except private reports |
| Orchestration | No Access |
| Database | Limited: Everything except private Account, Person, Opportunity, Activity lists and filters |
| Advertising | Full Access |
| Personalization | Full Access |
| MCP | No Access |
| Sales | No Access |
| Settings | Limited: My Profile only |
| Gen AI | Full Access |
Admin
| Demandbase Area | Access |
| Analytics | Full Access |
| Orchestration | Full Access |
| Database | Full Access |
| Advertising | Full Access |
| Personalization | Full Access |
| MCP | Full Access |
| Sales | Full Access |
| Settings | Full Access |
| Gen AI | Full Access |
Marketing
| Demandbase Area | Access |
| Analytics | Limited: Everything except private reports |
| Orchestration | Full Access |
| Database | LImited: Everything except private Account, Person, Opportunity, Activity lists and filters |
| Advertising | Full Access |
| Personalization | Full Access |
| MCP | No Access |
| Sales | No Access |
| Settings | Limited: My Profile only |
| Gen AI | Full Access |
Advertising Admin
| Demandbase Area | Access |
| Analytics | No Access |
| Orchestration | No Access |
| Database | No Access |
| Advertising | Full Access |
| Personalization | No Access |
| MCP | No Access |
| Sales | No Access |
| Settings | Limited: My Profile only |
| Gen AI | Full Access |
Personalization Admin
| Demandbase Area | Access |
| Analytics | No Access |
| Orchestration | No Access |
| Database | No Access |
| Advertising | No Access |
| Personalization | Full Access |
| MCP | No Access |
| Sales | No Access |
| Settings | Limited: My Profile only |
| Gen AI | Full Access |
Demandbase One for Sales
| Demandbase Area | Access |
| Analytics | Limited: Dashboard, Site Analytics, People, Reports (view-only), Communication History (view-only) |
| Orchestration | No Access |
| Database | No Access |
| Advertising | No Access |
| Personalization | No Access |
| MCP | Full Access |
| Sales | Full Access |
| Settings | Limited: My Profile, Action Configurations (view-only), Journey Builder (view-only) |
| Gen AI | Full Access |
Understand How Multiple Permission Sets Combine
You can assign multiple permission sets to a user. Demandbase combines the permissions and grants the user the highest access level assigned for each area.
For example, a user has the following permission sets:
- Marketing: Full Access to Advertising
- Sales: No Access to Advertising
The user receives Full Access to Advertising because that is the highest access level provided by the assigned permission sets.
Tip: Gen AI permissions combine in the same way. If any assigned permission set grants access to an AI agent, the user can access that agent.
View Permission Sets Assigned to a User
To view a user's assigned permission sets and combined permissions:
- From the left navigation bar, go to Settings > User Management > Users.
- In the Permissions column, view the permission sets assigned to the user.
-
To view the user’s combined permissions, hover over their email address, and click
Settings > View Details.
Review the Permission Set Audit Trail
The permission set audit trail allows admins to review who changed permission sets, what changes were made, and when they occurred.
The audit trail includes the following activities from the past 90 days:
- Create
- Update
- Delete
- User assignment
- User removal
Steps to Review the Permission Set Audit Trail
- From the left navigation bar, go to
- Review the permission set activity.
- Expand an action to view additional details.