About the default security roles

The default security roles, PlanAdminRole and PlanUserRole, are included in the system's default security policy, Global. These roles are based on the application access levels for Marketing Operations in Marketing Platform and they are always in effect.

When, in the Marketing Platform, you add a user to a user group that has the PlanAdminRole level of access, that user is assigned the PlanAdminRole user role in Marketing Operations. By default, users with this role have access to all administrative and configuration settings.

When, in the Marketing Platform, you add a user to a user group with the PlanUserRole level of access, that user is assigned the PlanUserRole user role in Marketing Operations. By default, users with this role are granted few permissions.

You cannot override these role assignments in the User Permissions page of Marketing Operations, and you cannot remove them from the Global security policy. To change the system role assigned a user, you must change their user group assignment in the Marketing Platform.

Remember that changes made to users in the Marketing Platform are reflected in Marketing Operations only after the user tables are synchronized. User synchronization occurs programmatically at a regular interval, as specified by Settings > Configuration > Marketing Operations > umoConfiguration > usermanagerSyncTime.. Or, you or another system administrator can invoke the Synchronize Users function from the Administrative Settings page in Marketing Operations.