Help Center

BlueConic Roles

BlueConic uses role-based permissions for its users. A role grants access to BlueConic functions, and a user can be assigned to one or more roles. You can grant users access to the BlueConic functionalities that suit their function within your enterprise.

Preconfigured roles in BlueConic

BlueConic comes preconfigured with a number of roles. The following roles are available out of the box:

Role Description
Application Manager Manages the entire BlueConic application at your site. The Application Manager can add and remove channels (websites, email, mobile apps), add users authorized to log into and interact with BlueConic, help users change their passwords, set the inactivity timeout for users at your site, and manage general BlueConic settings and roles.

Content Manager The Content Manager generally supervises online marketing initiatives on all of your BlueConic domains. The Content Manager works mostly with BlueConic insights and in the Home tab but can also create, manage, and monitor dialogues.

Customer Insights Manager Responsible for creating connections and segments to provide rich insights on customer data.

Data Scientist Can create and run AI Workbench notebooks and insights. This also includes the "Notebook editor" permission for editing notebook code in AI Workbench.

Insights Only Only has access to create and view insights.

IT / System Administrator Installs and maintains the complete BlueConic deployment.

Online Marketer The daily user of BlueConic. This person creates, manages, and monitors dialogues and engages in online conversations with visitors to your BlueConic channels.

BlueConic Support team access

Your tenant also has a role for BlueConic Support, which is intended specifically for BlueConic Support employees who log in to your tenant when you have a support issue. Through this role, you can determine what specific objects and settings these employees have access to.

To grant Support access to your environment, go to BlueConic settings > Access management > BlueConic Support access.

Note: You may also see a role in your tenant for BlueConic Support with Container Status, which has been deprecated. For now, we recommend using the same permissions for this role that you have for the BlueConic Support role.

Privacy controls for access to PII

At the top of the role access settings, there is a checkbox for PII (Personally Identifiable Information) under "Privacy controls." Users that are within roles that have this option checked will have access to view data that is considered PII within profiles, groups, and timeline events. If this option is not checked for a role, those users will only be able to view data that is not considered PII. Learn more about data sensitivity and data visibility in BlueConic.

BlueConic Role Permissions Access to PII.png

Modify or create user roles in BlueConic

You can modify existing roles and create new custom roles as needed by going to BlueConic settings > Access management > Roles.

When creating a role, you will have the ability to select and deselect all of that role's permission settings, as pictured below. This will determine what features and capabilities that users within the role will have access to.


Custom role example: Digital Privacy Officer (DPO)

An additional role some customers create in BlueConic is the Digital Privacy Officer (DPO). This is the only role allowed to view individual profiles and their PII, and optionally (as a separate permission) to edit the profile. A DPO role can also have powerful privacy capabilities, such as the ability to download or delete a profile.

Custom role example: Segmentation Specialist

Another example of a custom role could be a Segmentation Specialist. You may want users within this role to have access to Segments, Insights, and the Simulator. To grant more access to users with this role, select the checkboxes of the desired function.

Each function in the role access list maps to BlueConic menu items. BlueConic users see only the menu items to which access has been granted. For example, to a user in the role above, the menu bar would look like this:

How does the data scientist  roles develop machine learning algorithms and AI models in BlueConic?

The BlueConic home tab is always accessible, as are the Search feature and the "Notifications," "Help," and "Personal Settings" menu items. Other than that, the main menu only shows the "Profiles," "Insights," and "Simulator" items that the role grants access to.

Users can have multiple roles assigned, which will combine privileges. If one of the assigned roles grants access, the user is allowed access to the function. Roles are assigned to BlueConic users on the Users tab under Settings > Access management.

Breakdown of permissions

Feature Permissions


Grants access to view, edit, and create listeners.


Grants access to view, edit, and create segments.


Grants access to view, edit, and create dialogues.

  • Add new positions: Grants access to add new positions for dialogues.
  • Templates: Grants access to edit and create dialogue templates.

Grants access to view, edit, and create connections.


Grants access to view, edit, and create lifecycles.


Grants access to view, edit, and create insights and dashboards.

  • Email notifications: Grants access to be able to configure, schedule, and send email notifications for insights and dashboards to their inbox or any other email addresses.

Grants access to view and use the BlueConic simulator.


Grants access to view, edit, and create profile properties.

Profile timeline event types

Grants access to view, edit, and create profile timeline event types.


Grants access to view profiles.

  • Edit profiles: Grants access to edit profiles.

Grants access to view groups.

  • Edit groups: Grants access to edit groups.
External trackers

Grants access to view, edit, and create external trackers


Grants access to view, edit, and create objectives

AI Workbench

Grants access to view, create, and edit parameters for notebooks in AI Workbench.

  • Notebook editor: Grants access to view and edit notebook code in AI Workbench.

Grants access to view and edit all settings.

  • Channels and BlueConic hostnames: Grants access to view, edit, and create channels and hostnames.
  • Plugins: Grants access to view, edit, and create plugins.
  • Access management:
    • Users: Grants access to view, edit, and create users and to control access to these features:
      • Applications
      • Single sign-on (SSO)
      • BlueConic Support access
    • Roles: Grants access to view, edit, and create user roles.
    • Access based on IP address: Grants access to view and edit access to BlueConic based on IP address.
    • Timeout configuration: Grants access to view the user inactivity timeout setting for BlueConic users at your site.
      • Edit timeout configuration: Grants access to edit the inactivity timeout setting that controls when BlueConic user sessions at your site automatically time out after a period of inactivity. Learn more about the timeout configuration setting that controls automatic logouts.
  • Privacy: Grants access to view and edit privacy settings.
  • General: Grants access to view and edit general tenant settings.
  • Profile merging: Grants access to view, edit, and create profile merging rules.

Grants access to view and edit other general settings.

Domain-based permission

Role-based permission in BlueConic determines which parts of BlueConic a user can access. Users assigned to the same role have exactly the same permissions to access the same BlueConic functionality. Note, however, that when domain-based permission is taken into account, users with the same role might not be able to modify the same items within BlueConic.

BlueConic Support Access

The BlueConic Support team provides technical support and troubleshooting for BlueConic customers. Each BlueConic customer can elect whether to allow the BlueConic Support role to have access to their tenant. Additionally, you can decide whether to enable BlueConic Support to view PII data in your tenant. See Allowing BlueConic Customer Success to access your environment for details.


Was this article helpful?
0 out of 0 found this helpful