Help Center

BlueConic Roles

BlueConic uses role-based permissions for its users. A role grants access to BlueConic functions, and a user can be assigned to one or more roles. You can grant users access to the BlueConic functionalities that suit their function within your enterprise.

Learn more: Visit BlueConic University

See the Creating Roles video in the BlueConic University.

Preconfigured roles in BlueConic

BlueConic comes preconfigured with a number of roles. The following roles are available out of the box:

Role	Description
Application Manager	Manages the entire BlueConic application at your site. The Application Manager can add and remove channels (websites, email, mobile apps), add users authorized to log into and interact with BlueConic, help users change their passwords, set the inactivity timeout for users at your site, and manage general BlueConic settings and roles.
Content Manager	The Content Manager generally supervises online marketing initiatives on all of your BlueConic domains. The Content Manager works mostly with BlueConic insights and in the Home tab but can also create, manage, and monitor dialogues.
Customer Insights Manager	Responsible for creating connections and segments to provide rich insights on customer data.
Data Scientist	Can create and run AI Workbench notebooks and insights. This also includes the "Notebook editor" permission for editing notebook code in AI Workbench.
Insights Only	Only has access to create and view insights.
IT / System Administrator	Installs and maintains the complete BlueConic deployment.
Online Marketer	The daily user of BlueConic. This person creates, manages, and monitors dialogues and engages in online conversations with visitors to your BlueConic channels.

BlueConic Support team access

Your tenant also has a role for BlueConic Support, which is intended specifically for BlueConic Support employees who log in to your tenant when you have a support issue. Through this role, you can determine what specific objects and settings these employees have access to.

To grant Support access to your environment, go to BlueConic settings > Access management > BlueConic Support access.

Note: You may also see a role in your tenant for BlueConic Support with Container Status, which has been deprecated. For now, we recommend using the same permissions for this role that you have for the BlueConic Support role.

Privacy controls for access to PII

At the top of the role access settings, there is a checkbox for PII (Personally Identifiable Information) under "Privacy controls." Users that are within roles that have this option checked will have access to view data that is considered PII within profiles, groups, and timeline events. If this option is not checked for a role, those users will only be able to view data that is not considered PII. Learn more about data sensitivity and data visibility in BlueConic.

BlueConic Role Permissions Access to PII.png

Modify or create user roles in BlueConic

You can modify existing roles and create new custom roles as needed by going to BlueConic settings > Access management > Roles.

When creating a role, you will have the ability to select and deselect all of that role's permission settings, as pictured below. This will determine what features and capabilities that users within the role will have access to.

Custom role example: Digital Privacy Officer (DPO)

An additional role some customers create in BlueConic is the Digital Privacy Officer (DPO). This is the only role allowed to view individual profiles and their PII, and optionally (as a separate permission) to edit the profile. A DPO role can also have powerful privacy capabilities, such as the ability to download or delete a profile.

Custom role example: Segmentation Specialist

Another example of a custom role could be a Segmentation Specialist. You may want users within this role to have access to Segments, Insights, and the Simulator. To grant more access to users with this role, select the checkboxes of the desired function.

Each function in the role access list maps to BlueConic menu items. BlueConic users see only the menu items to which access has been granted. For example, to a user in the role above, the menu bar would look like this:

How does the data scientist roles develop machine learning algorithms and AI models in BlueConic?

The BlueConic home tab is always accessible, as are the Search feature and the "Notifications," "Help," and "Personal Settings" menu items. Other than that, the main menu only shows the "Profiles," "Insights," and "Simulator" items that the role grants access to.

Users can have multiple roles assigned, which will combine privileges. If one of the assigned roles grants access, the user is allowed access to the function. Roles are assigned to BlueConic users on the Users tab under Settings > Access management.

Breakdown of permissions

Feature	Permissions
Listeners	Grants access to view, edit, and create listeners.
Segments	Grants access to view, edit, and create segments.
Dialogues	Grants access to view, edit, and create dialogues. Add new positions: Grants access to add new positions for dialogues. Templates: Grants access to edit and create dialogue templates.
Connections	Grants access to view, edit, and create connections.
Lifecycles	Grants access to view, edit, and create lifecycles.
Insights	Grants access to view, edit, and create insights and dashboards. Email notifications: Grants access to be able to configure, schedule, and send email notifications for insights and dashboards to their inbox or any other email addresses.
Simulator	Grants access to view and use the BlueConic simulator.
Properties	Grants access to view, edit, and create profile properties.
Profile timeline event types	Grants access to view, edit, and create profile timeline event types.
Profiles	Grants access to view profiles. Edit profiles: Grants access to edit profiles.
Groups	Grants access to view groups. Edit groups: Grants access to edit groups.
External trackers	Grants access to view, edit, and create external trackers
Objectives	Grants access to view, edit, and create objectives
AI Workbench	Grants access to view, create, and edit parameters for notebooks in AI Workbench. Notebook editor: Grants access to view and edit notebook code in AI Workbench.

Settings	Grants access to view and edit all settings. Channels and BlueConic hostnames: Grants access to view, edit, and create channels and hostnames. Plugins: Grants access to view, edit, and create plugins. Access management: Users: Grants access to view, edit, and create users and to control access to these features: Applications Single sign-on (SSO) BlueConic Support access Roles: Grants access to view, edit, and create user roles. Access based on IP address: Grants access to view and edit access to BlueConic based on IP address. Timeout configuration: Grants access to view the user inactivity timeout setting for BlueConic users at your site. Edit timeout configuration: Grants access to edit the inactivity timeout setting that controls when BlueConic user sessions at your site automatically time out after a period of inactivity. Learn more about the timeout configuration setting that controls automatic logouts. Privacy: Grants access to view and edit privacy settings. General: Grants access to view and edit general tenant settings. Profile merging: Grants access to view, edit, and create profile merging rules.
Other	Grants access to view and edit other general settings. Audit event: Grants access to call Audit Events in the BlueConic API. Authorize applications: Grants access to authorize applications to communicate with the BlueConic REST API. Bulk change and delete: Grants access to the bulk change and delete options for any objects the user has permissions for (e.g., Listeners bulk change and Listeners bulk delete).

Domain-based permission

Role-based permission in BlueConic determines which parts of BlueConic a user can access. Users assigned to the same role have exactly the same permissions to access the same BlueConic functionality. Note, however, that when domain-based permission is taken into account, users with the same role might not be able to modify the same items within BlueConic.

BlueConic Support Access

The BlueConic Support team provides technical support and troubleshooting for BlueConic customers. Each BlueConic customer can elect whether to allow the BlueConic Support role to have access to their tenant. Additionally, you can decide whether to enable BlueConic Support to view PII data in your tenant. See Allowing BlueConic Customer Success to access your environment for details.

Learn more: Visit BlueConic University

See the BlueConic Support Access video in the BlueConic University.