{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"redocly_category":"Products","product_name":"Control Panel","type":"markdown"},"seo":{"title":"Policy-Based Workflow Permissions","description":"Learn how to configure workflow permissions at global and project levels, including setting permissions from Treasure Console and the API.","siteUrl":"https://docs.treasure.ai","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"policy-based-workflow-permissions","__idx":0},"children":["Policy-Based Workflow Permissions"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To access and work in Treasure Workflow, permissions must be granted by the account administrator or owner. You can grant permissions globally for all workflows or limit them to specific projects."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Workflow projects are visible in Treasure Console when you have either global permissions or permissions to individual workflow projects. Workflows to which you do not have access are filtered out."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"permission-levels","__idx":1},"children":["Permission Levels"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can grant access to global workflow permissions, or limit access to specific workflow projects so that permissions only apply to workflows within that project."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Permission Type"},"children":["Permission Type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Global permissions"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Provides full access to View, Edit, and/or Run on all workflows in all projects."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Limited permissions"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Limits permissions to View, Run, and/or Edit specific workflow projects—restricting which workflows users can access."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Combination of permissions"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["For example, you can allow global permissions for View and then project-level permissions for Edit and Run."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Example:"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["An account has segregated their production workflow as one project and their development workflow in a separate project. You want more teammates to have access to your development project, but you want limited access to your production project."]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For development, you can choose View, Run, Edit or any combination of project-level permissions."]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["All users have full access to their development projects and can create new workflows in the project."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For production, choose global View permissions for all users and Edit and Run permissions for specific users."]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Permissions are additive, so specific users will have View, Edit, and Run permissions for the production project and other users will only have View permissions on the production project."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Users with Edit permissions can create, modify, and delete workflows in the production project."]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"audience-studio","__idx":2},"children":["Audience Studio"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["With project-level workflow permissions, you can assign permissions to system-generated workflow projects from Audience Studio, including Parent Segment, Predictive Scoring, and Activation workflow projects."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following types of workflows can have project-level permissions:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Parent Segment"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Predictive Scoring"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Activation"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"about-project-level-permissions-and-audience-studio-projects","__idx":3},"children":["About Project-Level Permissions and Audience Studio Projects"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to Audience Studio system-generated workflows is limited with workflow project-level permissions.",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Only Parent Segment creators and users that have MasterSegmentConfig permissions automatically have access to the corresponding system-generated workflow projects including Activation, Predictive, and Parent Segment workflow projects."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Other users must be given explicit access to individual parent segment, activation, and/or predictive workflow projects."]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configure-workflow-permissions-from-treasure-console","__idx":4},"children":["Configure Workflow Permissions from Treasure Console"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can set global permissions through Treasure Console. Project-level permissions can be configured from both Treasure Console and the API."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Treasure Console"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Control Panel > Security > Policies."]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/image2023-9-19_1-9-6.55c55606eb9eba526db56e4b098a83f41123d3faa7ef780a5b39d24f1251372c.f0cddcd7.png","alt":"Policies page in Security settings"},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":3},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["the policy"]}," and then select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Permissions"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/image2023-9-22_11-17-54.2d333b871a0b341181e31560ed9e6d1b2a3ec332ec97a9605866078dfc190d58.f0cddcd7.png","alt":"Selecting Permissions tab for a policy"},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":4},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the pencil icon."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/image2023-9-22_11-18-42.41db2d54faec04dd5a0f2b9caadad88de3d567c89ec32ad5b46db1fe3a35030a.f0cddcd7.png","alt":"Edit icon for workflow permissions"},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":5},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set workflow access permissions."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save."]}]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"width":"30%","data-label":"Permission Options"},"children":["Permission Options "]},{"$$mdtype":"Tag","name":"th","attributes":{"width":"70%","data-label":"Description"},"children":["Description "]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Configurations for all parent segments"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["View"]}," - View all parent segment configurations."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Full"]}," - View, edit, delete and create master segments."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Important"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Do not remove the automatic selection of ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["View All Parent Segment Configurations"]},". This is a system requirement—other parent segment actions depend on this base permission being enabled."]}]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manage own parent segments"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users can create new parent segments and run, edit, and delete parent segments they own."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Export Results to Destination"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["If selected, the user can export results."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["All Workflow Projects"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["View"]}," - View all workflows in all projects."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Run"]}," - Run user-defined workflows. System-generated workflows (for example, Audience Studio activations) are managed separately through project-level permissions."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Edit"]}," - Create, modify, and delete user-defined workflows. System-generated workflows are managed separately through project-level permissions."]}]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"view-all-permissions-of-a-user","__idx":5},"children":["View All Permissions of a User"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Treasure Console"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Control Panel"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Users"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select a specific user."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Policies."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Show All Permissions."]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/image2023-9-22_11-10-1.c050ff87de2b374a852bef3ccf6ff2502b68a5f68e564571c3dfba4d9cb2fede.f0cddcd7.png","alt":"Show All Permissions button on user Policies tab"},"children":[]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configure-workflow-permissions-from-the-api","__idx":6},"children":["Configure Workflow Permissions from the API"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Project-level workflow permissions can be set through Treasure Console and the API. If you are interested in workflow project-level permissions, contact your account representative."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After the workflow permissions are set, the system might take a maximum of five minutes to enforce the permissions."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"related-pages","__idx":7},"children":["Related Pages"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/control-panel/security/policies/workflow-permissions/workflow-permissions-matrix"},"children":["Workflow Permissions Matrix"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/control-panel/security/policies/permission-policy-api"},"children":["Permission Policy API"]}]}]}]},"headings":[{"value":"Policy-Based Workflow Permissions","id":"policy-based-workflow-permissions","depth":1},{"value":"Permission Levels","id":"permission-levels","depth":2},{"value":"Audience Studio","id":"audience-studio","depth":3},{"value":"About Project-Level Permissions and Audience Studio Projects","id":"about-project-level-permissions-and-audience-studio-projects","depth":4},{"value":"Configure Workflow Permissions from Treasure Console","id":"configure-workflow-permissions-from-treasure-console","depth":2},{"value":"View All Permissions of a User","id":"view-all-permissions-of-a-user","depth":2},{"value":"Configure Workflow Permissions from the API","id":"configure-workflow-permissions-from-the-api","depth":2},{"value":"Related Pages","id":"related-pages","depth":2}],"frontmatter":{"seo":{"title":"Policy-Based Workflow Permissions","description":"Learn how to configure workflow permissions at global and project levels, including setting permissions from Treasure Console and the API."}},"lastModified":"2026-06-12T02:13:00.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/control-panel/security/policies/workflow-permissions","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}