Skip to content
Last updated

Workspaces and Permissions

Engage Studio uses Workspaces and Policy-Based Permissions (PBP) to manage access and governance. This ensures that your teams can collaborate securely, with clear separation between brands, regions, or business units.

1. Understanding Workspaces

A Workspace is a secure container for your marketing assets. Everything you build in Engage Studio belongs to a specific workspace.

Why use Workspaces?

  • Isolation: Separate assets by brand or region (e.g., "Japan Marketing" vs. "US Marketing").
  • Governance: Control which Email Domains, Custom Web Subdomains, and Audience Segments are available to each team.
  • Security: Prevent accidental access to sensitive data or unauthorized sending.

Workspace Structure

Each Workspace contains:

  • Campaigns: The journeys and activations.
  • Landing Pages: Static campaign destinations created in this workspace.
  • Templates: Email designs and content.
  • Senders: Verified sender profiles authorized for use in this workspace.
  • Workspace Settings: Configuration of available Email Domains, Custom Web Subdomains, and Parent Segments.

How to Create a Workspace

  1. Navigate to Engage Studio > Workspaces.
  2. Click Create Workspace.
  3. Enter a unique Name and optional Description.
  4. Click Save.

Workspace Overview

Configuring Workspace Resources

Once created, an Admin must assign resources to the Workspace:

  1. Email Domains: Select which verified sending domains (configured by IT) can be used.
  2. Custom Web Subdomains: Select which registered, Active Landing Page custom subdomains are available to this workspace. Marketers can select only the subdomains assigned to their workspace. When a subdomain is assigned to multiple workspaces, coordinate the URL slugs used by each workspace because a slug must be unique across landing pages using that subdomain.
  3. Parent Segments: Select which CDP segments are visible for targeting within this workspace.

2. Managing Permissions (Policy-Based Permissions)

Policy-Based Permissions (PBP) allow you to define granular access controls. Instead of simple "Admin" or "User" roles, you create Policies that define exactly what a user can do.

Permission Groups

Landing Pages and Landing Page custom subdomains do not have dedicated permission entries in the policy screens. Access is derived from these existing groups:

Permission groupHow it affects Landing Pages
Workspace Configuration PermissionsControl workspace administration and assignment of available resources, including custom subdomains.
Workspace Feature PermissionsThe existing EngageCampaign View, Edit, and Launch permissions control viewing pages and uploads, managing drafts and uploads, and publishing or unpublishing pages.
Domain PermissionsThe existing EngageDomain view and edit permissions control web-domain status and operations. EngageDomain covers both Email Domain and Web Domain.

A user must have access to the target workspace and the appropriate permissions in these groups. Landing Page operations follow the user’s existing Campaign permissions, while web-domain operations use the account-scoped Engage Domain permission.

How to Configure Policies

Permissions are managed in the Control Panel, not inside Engage Studio itself.

  1. Go to Control Panel > Policies.
  2. Create a new Policy or edit an existing one.
  3. Scroll to the Engage Studio section.

Configuration Areas

  • Configurations: Who can manage Workspaces, Domains, and Parent Segments? (Usually Admins).
    • Configuration Permissions
  • Features: Who can build campaigns and templates? (Marketers, Designers).
    • Feature Permissions
  • Domains: Who can view and manage email and web domains? (IT/Admins).
    • Domain Permissions

Common User Roles (Examples)

RoleRecommended Permissions
Marketing ManagerEdit Campaigns/Templates, Launch Campaigns. Access to specific Workspaces.
Content DesignerEdit Templates. View Campaigns. No Launch access.
AnalystView Campaigns and Reports. No Edit access.
IT AdminFull Access to Configurations and Domains.

FAQ

Q. Can I share an Email Domain across multiple Workspaces? Yes. A verified domain (e.g., marketing.example.com) can be assigned to multiple workspaces.

Q. Can I move a campaign to another Workspace? No. Resources are bound to the workspace where they were created.

Q. Who "owns" the campaign launch? Campaigns run under the permissions of the user who activates them, but the resources used (Senders, Segments) are scoped by the Workspace.