User Permissions

The following permission levels are available for media owner users within Kevel. Each user has an organization role, and an access level for each product on each network they can use. Organization admins set both in Settings > User Management. See User Management.

Overall

Permission level	Abilities
Not an organization admin	View the user management page Search and filter on the user management page Open a user to view their access, without changing it
Organization admin	All abilities of a user who is not an organization admin, plus: Add and edit users, and set their access to Ad Server, Console, and Audience, for all networks within the organization Deactivate and reactivate users Reset the password of a user who signs in with a password and not SSO

An organization admin cannot deactivate their own user or remove their own organization admin status. Another organization admin makes those changes.

Kevel Ad Server

Permission level	Abilities
Read-only	View ad campaigns and their details View inventory (sites, channels, etc.) resources and their details Run & schedule reports
Editor	All abilities of Read-only, plus: Campaign management (create, edit, & remove ad campaigns and their details) Inventory management (create, edit, & remove sites, channels, and ad sizes)
Admin	All abilities of Editor, plus: API key management (view, create, edit, & deactivate API keys)

Studio access is set for each network, separately from the access level. Studio access requires the Editor or Admin level.

Kevel Console

Permission level	Abilities
Read-only	View ad campaigns and their details Run reports
Editor	All abilities of Read-only, plus: Create campaigns and their details, but not able to set them to active
Admin	All abilities of Editor, plus: Set campaigns to active View, edit, create, and delete advertiser users for advertisers in this business manager

Kevel Audience

Audience access is set for each network. An organization admin chooses a network and an access level, Read-only or Editor, for each user. A user without Audience access on any network can sign in to Kevel but cannot open the Audience dashboard. Being an organization admin does not give access to Audience.

Where one Audience environment serves more than one network, the most restrictive access level across the networks where the user has Audience access applies. A user who is an Editor on one network and Read-only on another is Read-only in the Audience dashboard.

Permission level	Abilities
Read-only	View every Audience page, including the User Explorer, orders, segments, user attributes, destinations, triggers, predictions, event logs, and the RFM Map The Audience dashboard rejects any change requested by a Read-only user
Editor	All abilities of Read-only, plus: Create, update, and delete segments, user attributes, destinations, triggers, predictions, and A/B experiments Configure data imports