About the default security policy roles

Default roles, Plan Administrator and Plan User, are included in the default Global security policy. These roles provide application access levels for Marketing Operations in Marketing Platform and they are always in effect.

When, using Marketing Platform, you add a user to a user group that has the PlanAdminRole level of access, that user is assigned the Plan Administrator user role in Marketing Operations. By default, users with this role have access to all administrative and configuration settings.

When, using Marketing Platform, you add a user to a user group with the PlanUserRole level of access, that user is assigned the Plan User user role in Marketing Operations. By default, users with this role are granted few permissions.

These role assignments display on the Settings > Marketing Operations Settings > User Permissions page.

You cannot override these role assignments on the User Permissions page, and you cannot remove these roles from the Global security policy. To change the default security policy role that is assigned to a user, you must change the user group assignment using Marketing Platform.

Any changes made to users in Marketing Platform are reflected in Marketing Operations only after you synchronize the user database tables. User synchronization occurs automatically at regular intervals, as specified by Settings > Configuration > Marketing Operations > umoConfiguration > usermanagerSyncTime. Or, to manually synchronize the user database tables, you or another administrator can start Settings > Marketing Operations Settings > Synchronize Users.