# RBAC for Audiences

### Permissions Related to Freshpaint Audiences

For Freshpaint Audiences, the relevant permissions are listed below as well as the actions they allow the user to perform within Freshpaint Audiences. 

* **Connect Integrations**
  * Adding integration account IDs, authentication for integrations
* **Modify Allowlists**
  * Allowlist editing
  * Identity matching editing
  * Audience Identifiers
  * Google ads enhanced conversions
* **Create / Edit Access for Audiences**
  * Includes exporting imported audience

### Permissions for External Agencies

A common concern with Freshpaint Audiences is how to allow a partner from an external agency permission to connect their ad accounts to Freshpaint, without allowing them access to potentially sensitive patient data such as audience user lists. The Event Manager role is designed for this use case. Invite the person from your agency to your Freshpaint account and assign them the Event Manager role. As always, confirm with your organization's compliance officer.

### Full RBAC Table

|                           | Admin | Data Manager | General User | Event Manager | Data Viewer |
| ------------------------- | ----- | ------------ | ------------ | ------------- | ----------- |
| Configure Events          | ✅     | ✅            | ✅            | ✅             |             |
| Configure Transformations | ✅     | ✅            | ✅            | ✅             |             |
| Manage Video              | ✅     | ✅            | ✅            | ✅             |             |
| Web Tracker Monitoring    | ✅     | ✅            | ✅            | ✅             |             |
| View / Sync Audiences     | ✅     | ✅            | ✅            | ✅             |             |
| Connect Integrations      | ✅     | ✅            | ✅            | ✅             |             |
| Create / Edit Audiences   | ✅     | ✅            | ✅            |               |             |
| Edit Consent Management   | ✅     | ✅            |              |               |             |
| Modify Allowlists         | ✅     | ✅            |              |               |             |
| Manage Team               | ✅     |              |              |               |             |