Align your team structure with your data governance strategy.
Role-Based Access Control enables organizations to manage user permissions
across projects and environments. The system restricts feature access based on assigned user roles, supporting data governance requirements.
Roles
Freshpaint provides five user roles with distinct permission levels.
Admin: Full administrative access including user management, project/environment creation, and HIPAA allowlist configuration.
Data Manager: Elevated data access with the ability to view and modify PHI allowlists, and configure consent management settings.
General User: Standard operational access for configuring destinations and events. General users have PHI visibility, but no ability to modify allowlists or consent settings.
Event Manager: Focused access for managing event tracking and integrations without access to PHI or form submissions.
Data Viewer: Read-only access limited to viewing analytics dashboards and
reports.
User Permissions by Role
Feature
Admin
Data Manager
General User
Event Manager
Data Viewer
PHI Access
✅
✅
✅
❌
❌
Allowlist (modify)
✅
✅
❌
❌
❌
Destinations
✅
✅
✅
✅
❌
Event Library
✅
✅
✅
✅
❌
Audiences (view)
✅
✅
✅
✅
❌
Audiences (edit)
✅
✅
✅
❌
❌
Forms (beta)
✅
✅
❌
❌
❌
Consent Management (view)
✅
✅
✅
✅
✅
Consent Management (edit)
✅
✅
❌
❌
❌
Analytics
✅
✅
✅
✅
✅
Audit Log
✅
❌
❌
❌
❌
Web Tracker Monitoring
✅
✅
✅
✅
❌
Video
✅
✅
✅
✅
❌
Offline Attributions
✅
✅
✅
✅
✅
Live View
✅
✅
✅
❌
❌
Visual Editor
✅
✅
✅
✅
❌
Access to Projects and Environments
Users can see the environments they have access to in the left navigation panel in Freshpaint. Admins always have access to all environments, and can grant access to specific environments to specific users.
When a new environment is created, all users have access by default. An admin must explicitly restrict access via the Teams page.
