The Access Management feature lets you manage user access to the Customer Data Platform (CDP) portal and its applications. It enables the designated administrator to monitor and maintain roles and permissions for enhanced control.

Capabilities¶

The following are the capabilities of Access Management:

• Administrator(s): An administrator is a designated team member who oversee, manage, and control all users' access to CDP's features, serving as the gatekeeper. Administrators receive first access to any new add-on features.

• Manage user roles: Administrators create and disable user roles, invite new team members or partners to your CDP application, and issue temporary passwords. New team members must change the temporary password to create their own password.

• Manage user permissions: Administrators grant access to specific features to users based on their skills and access levels.

• Single Sign-On: Acquia uses this capability to forward authentication or login requests to a third-party IDP. It is not self-service and requires assistance from Support.

Use Cases¶

The following are the use cases:

• Act as a gatekeeper: Oversee, manage, and control all users' access to CDP's features to ensure secure and appropriate usage.

• Manage add-ons: Access and manage any new add-on features to ensure proper integration and utilization of add-ons.

• Create and disable user roles: Create and disable user roles as necessary to maintain operational integrity and security.

• Invite new team members or partners: Invite new team members or partners to CDP by providing them temporary passwords. New team members must change the temporary password to create their own password to ensure a controlled and secure access environment.

• Assign feature access: Assign specific feature access to users based on their their skills and access levels required to maximize efficiency and maintain security protocols.

Important Considerations¶

Customers with multi-brand CDPs can encounter certain access management limitations. An administrator or user cannot self-serve specific permissions or roles due to conflicts in a multiple-environment setup. For example, if there are Brand A and Brand B CDP accounts, an administrator or user with access to one cannot be added to the other without assistance from the CDP Support team.

Components¶

The following are the components of Access Management: