Administrative permissions

This topic describes administrative permissions, which allow people to manage Medallia Experience Cloud. For information about permissions to view and manage reports in Medallia Web reporting and Medallia Mobile, see Reporting permissions.

Users

Manage Users: Create, edit, delete, and download Users and their details, including Roles and Data access permissions.
Impersonate Users: Impersonate Users by switching to a different account. Scope is shared with the Manage Users permission.
Import Users: Upload files to create, edit, or delete Users.

Roles

Manage Roles: View, create, edit, and delete Roles, including their attributes and permissions.
Manage Role Preferences: View, create, edit, and delete filter defaults for users and roles. This includes the Time zones and Word cloud settings you have permission to edit.
This permission accesses functionality available only in Medallia Setup.
Manage Data Views: View, create, edit, and delete Data views.

Manage Organization

Manage Units: View, create, edit, delete, and download Units.
This permission accesses functionality available only in Medallia Setup.
Manage Unit Groups: View, create, edit, and delete Unit groups.
This permission accesses functionality available only in Medallia Setup.
Manage Unit Type: View, create, edit, and delete Unit types.
Edit Units: View and edit Units.
Edit Unit Groups: View and edit Unit groups.
Import units: Upload files to activate, deactivate, or delete Units.

Feedback

Create Surveys: Create Surveys, view their Fields, and Survey designs.
Note: This permission does not apply for creating Ad Hoc surveys, which is granted by Create Ad Hoc surveys.
Edit Surveys: Edit and delete Surveys, generate Live links, view Fields and Survey designs. Scope this permission to edit All surveys or Limit it to specific surveys. For more information, see Delegated administration.
When granted together with the Edit Experience Programs permission, you can also edit the surveys that are part of the selected programs.
Manage Ad Hoc Invites: View, create, edit, and send Ad Hoc distributions.
Create Survey Emails: Create Distributions.
Edit Survey Emails: Edit and delete Distributions. Scope this permission to edit All emails or Limit it to specific emails. For more information, see Delegated administration
When granted together with Edit Experience Programs, it also edits the emails that are part of the selected program(s).
Manage Feedback Response Templates and Settings: Create, edit, and delete Feedback response templates and their general settings.
Manage Feedback Response Templates: View, create, edit, and delete Feedback response templates. Scope this permission to manage All templates or Limit it to specific templates. For more information, see Delegated administration.
Manage Smart Response: View, create, edit, and delete Smart responses. Scope this permission to manage All Smart responses or Limit it to specific ones. For more information, see Delegated administration.

Restriction: This feature is inactive by default. Ask your Medallia expert to file a Feature activation request with Medallia Support.
Create Designs: Create Survey designs and variations.
Edit Designs: Edit and delete Survey designs and design variations. Scope this permission to edit All designs or Limit it to specific designs. For more information, see Delegated administration
When granted together with Edit Experience Programs, it also edits the designs that are part of the selected program(s).
Create Ad Hoc Surveys: Create and duplicate Ad Hoc surveys, as well as view and edit the Ad Hoc surveys you have created or duplicated.
Edit Ad Hoc Surveys: View, edit, and delete any Ad Hoc surveys, including those created by others. Scope this permission to edit All Ad Hoc surveys or Limit it to specific ones. For more information, see Delegated administration.
Edit Ad Hoc Surveys Sampling Settings: Edit the email invitation in in Ad Hoc surveys to run through Sampling filters and Quarantine rules.
Create Experience Programs: Create new Experience programs. This permission grants the ability to access and edit only the Experience programs you have created. If this permission is removed after creating a program, the program becomes uneditable unless Edit Experience programs permission is granted.
Edit Experience Programs: View, edit, and delete (only available from the Experience Programs Migration screen) Experience programs, including the ones created by other users. Scope this permission to edit All Experience programs or Limit it to specific ones. For more information, see Delegated administration.
Manage Experience Program Records: Remove Experience program records, bulk link existing records, edit program rules, edit program rule priorities, delete rules, and cancel record migrations.
Create Employee Programs: Create Employee programs.
Manage Employee Programs: View, edit, and delete Employee programs, including the ones created by other users. Scope this permission to edit All Employee programs or Limit it to specific ones. For more information, see Delegated administration.
Create Survey Libraries: Create new Question libraries.
Manage Survey Libraries: View, edit, and delete existing Question libraries and their assets.
Read Survey Libraries: View Question libraries, including those created by other users.
Remote API Call Configuration Management: Manage Remote API calls. Only for instances that have the Remote API Call element enabled.

Ask Now

Create Ask Now Tests and View My Reports: Create Ask Now tests and view your own results.
This permission is associated with the legacy Ask Now version (also known as v2.0), but must stay enabled for roles with permissions to manage and view the new version of Ask Now.
Edit Others' Ask Now Tests and View Their Reports: Edit and delete Ask Now tests created by other users, and view their results.
This permission is associated with the legacy Ask Now version (also known as v2.0), but must stay enabled for roles with permissions to manage and view the new version of Ask Now.
View Others' Ask Now Tests and Reports: View Ask Now tests created by other users and their results.
This permission is associated with the legacy Ask Now version (also known as v2.0), but must stay enabled for roles with permissions to manage and view the new version of Ask Now.
Manage Ask Now: View, create, edit, and delete Ask Now content. Scope this permission to view, create, edit, and delete All Parent surveys or Limit it to certain specific ones. If the user has access to at least one but Parent survey, the user can view but not edit the Ask Now.
View Ask Now Reports: View Ask Now results.

Translations

Manage All Translations: Add, edit, and delete Translations for all assets and entities, such as surveys, emails, reports, shared text, etc.
Manage Survey Translations: View, edit, and delete Translations for survey content. For more information, see Filters. Scope this permission to manage All survey translations or Limit it to specific ones. For more information, see Delegated administration
When granted together with Edit Experience Programs, it also edits the translations of the selected program(s).
Manage Shared Survey Text Translations: View, edit, and delete Translations for shared survey text, such as buttons labels, 'Required' tooltip, 'Choose language' and the language dropdown names, as well as errors and timeout warning messages. For more information, see Filters.
Manage Emails Translations: View, edit, and delete Translations for email content. For more information, see Filters and Email translation editor. Scope this permission to manage All email translations or Limit it to specific ones. For more information, see Delegated administration
When granted together with Edit Experience Programs, it also edits the translations of the selected program(s).
Manage Language Settings: Edit and delete the added Languages.

Reports and Preferences

Manage Reports and Controls: View, create, edit, and delete tabs and subtabs in Navigation. Additionally, create, edit, and delete reports, as well as view Fields and Roles.
When granted together with Edit Experience Programs, it also manages the reports that are part of the selected programs.
Note: Roles with this permission also need proper Data access permissions to preview reports.
Manage Custom Modules: View, create, edit, and delete Custom Module, as well as view Fields and Roles.
Note: Roles with this permission also need proper Data access permissions to preview reports.
Manage Shared Custom Filters: View, create, edit, and delete shared Filters and control panels.

Fields

Manage All Fields: View, create, edit, and delete Program fields. Note that some fields cannot be deleted as they are required for the instance to work.
Note: A role with this permission also needs access to either an Ad Hoc survey or an Experience program.

Sandboxes

Manage Outbound Change Sets: Manage the entities packaged for installation on another Admin Suite instance.
Manage Sandboxes: Create, reload, and delete Sandboxes.
Manage Email Allow-lists: Manage the Allowed emails to limit who can receive email (including survey emails, notifications, etc.) from a sandbox.

Apps

For accessing and managing Apps and accessing the Installed apps screen.

Manage Apps: View, create, version, and deprecate Apps and its entities.
Build Apps: View and build Apps and its entities.
View installed Apps: View the Install Apps screen.

Alerts

Manage Alert Cases

View, create, edit, and delete Alerts, including emails, as well as associate alerts with holiday calendars, edit business days on individual alerts, and edit alert rules.

This permission accesses functionality available only in Medallia Setup.

Manage Alerts Cases With Scope

View, create, edit, and delete Alerts and Alert emails with alert type scope. Scope this permission to manage All Alerts or Limit it to specific ones. For more information, see Delegated administration

Consider this scenario:

Role A has scoped access to limited alerts.
Role B has scoped access for all alerts.

If a user is logged in with Role A, that user sees only limited alerts. If a user is logged in with Role B, then that user sees all alerts.

Manage Alert Cases and Alert Settings

View, create, edit, and delete Alerts, as well as edit priorities, manage holiday calendars, business days, and alert assignments in alert settings.

Manage Case Forms

View, create, edit, and delete Case Forms.

Integrations

Manage Data Exports: View, create, edit, and delete Exporters.
When granted together with the Edit Experience Programs permission, you can also manage the exports that are part of the selected programs.
View Feedfile Detailed Reports: View detailed processing reports for inbound files.
Import Data via Webfeed: Access to specific OAuth 2.0-authenticated data feeds, which updates surveys, episodes, Org hierarchies, Users , and Lookup tables through an importer.
Note: Roles with this permission also need permission to manage the objects included in the data feed.
Export Data via Records API: View data from the Records API and use it to export record data from Experience Cloud.
Manage Bulk Imports: View, create, edit, and delete Manual Imports.
When granted together with the Edit Experience Programs permission, you can also manage imports that are part of the selected programs.
Manage Connectors: View, create, activate, deactivate, and delete Connectors.
Read Connectors: View the Connectors screen and existing Connectors.
Manage Importers: View, create, activate, deactivate, and delete Importers.
View Data from Query API: View data from the Query API and access Query API documentation.
Query API has different root nodes depending on the type of data (such as feedback or invitations). However, it is of paramount importance that the account assigned to the application consuming the Query API has the appropriate set of permissions to access data from the available Data sources, for information about the relevant permissions, see Authentication and authorization.

Digital

Manage Surveys: View, create, edit, and delete surveys in Digital.
View Surveys: View surveys in Digital.
View feedbacks and reports: A Digital Analyst can view only feedback and reports.
Manage Digital Surveys: Access all areas of the Digital Command Center but cannot edit or delete surveys that have been locked by a Digital CX Group Manager or Digital Administrator.
Advanced Digital Survey Management: A Digital CX Group Manager can access all areas of the Digital Command Center that are available to the Digital CX Manager. Additionally, the Digital CX Group Manager can lock and unlock surveys as well as edit and delete surveys that have been locked or published.
Digital Command Center Administration: Access all areas and permissions available to the Digital CX Group Manager. Manage Digital users, data access filters, and User Based Targeting (if enabled).

Conversations

Manage Conversations: View, create, edit, and delete Medallia Conversations, including dialog flow, interaction behavior, and messaging channels.

Text Analytics

Manage Topics: View, create, activate, import, export, and otherwise manage Text Analytics topics.
Manage Topics with Smart Topic Builder: Ability to access the AI-assisted features for topic discovery, rule generation, and auditing

Security

Manage Sensitive Data Detection Rules: View, create, edit, and delete Sensitive data rules.
Manage Inbound SSO: View, create, edit, and delete configurations related to Inbound SSO, such as Service Provider and Identity Provider settings.
Manage OAuth: View, create, edit, and delete all OAuth clients and its related entities.

Goals

View Goals: View goals set for specific business Units for specific time periods.
This permission accesses functionality available only in Medallia Setup.

Workflows

Manage Workflows: View, create, edit, and delete Workflows.

Journey Analytics

Access Journey Analytics: Allows access as a Journey Analytics user.
Admin Access Journey Analytics: Allows admin access to Journey Analytics.

X-Stats

Manage X-Stats: View, create, edit, and delete X-Stats.
Restriction: This functionality is currently in Beta. During this early access period, clients in the Beta program can learn about, try out, and test this feature, and they can provide feedback about it. This stage allows Medallia to refine the feature's design before its general availability. Be aware that functionality may change before then.

Strikedeck

Access Strikedeck: Allows access as a Strikedeck user.
Admin Access Strikedeck: Allows admin access to Strikedeck.

Zingle

Zingle Dashboard Administration: Allows administrative access to Zingle dashboards.
Manage Zingle Standard: View, create, edit, and delete Zingle standards.
Manage Zingle Bulk Messaging: View, create, edit, and delete Zingle bulk messages.
Manage Zingle Contact Deletion: Delete Zingle contacts.
Manage Zingle Analytics: View, create, edit, and delete Zingle analytics.
Manage Zingle User Management: View, create, edit, and delete Zingle users.

Crowdicity

Admin Access Crowdicity: Allows administrative access to Crowdicity.
Access Crowdicity: Allows access as Crowdicity user.
Blog User: Allows for reading and making comments on blogs. Read and make comments on blogs.
Blog Contributor: Enables ability to contribute posts to blogs.
Blog Editor: Allows full access to blog options.

Medallia Video

Standard Access LivingLens: View media in Video. Corresponds to the Video Standard user role.
It requires Experience Cloud and Video integration. For more information, see Medallia Video.
Pro Access LivingLens: View, create, edit, and delete media and create showreels in Video. Corresponds to the Video Pro user role.
It requires Experience Cloud and Video integration. For more information, see Medallia Video.
Pro Admin Access LivingLens: Create users, manage media, and create showreels in Video. Corresponds to the Video Channel Admin (formerly Pro Admin) user role.
It requires Experience Cloud and Video integration. For more information, see Medallia Video.
Customer Admin Access LivingLens: Grant all permissions, including managing users and create channels in Video. Corresponds to the Video Customer Admin user role.
It requires Experience Cloud and Video integration. For more information, see Medallia Video.

External Resources

Manage external resources: View, create, activate, edit, deactivate, and delete Credentials.
Read external resources: View existing Credentials.

Decibel

Super Admin: Access to all properties within an account.
Admin: Access to all Property Settings to which an admin has been granted access.
Analyst: Access to all reporting and support functions for properties to which an analyst has been granted access.

Benchmarks

Medallia Benchmarks: Create, edit, and delete Benchmarks.

Confidential Reporting

Override Enhanced Anonymity Module Settings

Overrides these controls in an Enhanced Anonymity dashboard report:

Time period
Reporting date
Data filter
Benchmark fields
Data view (module level)
Data type

Audit Log

Audit Log: Allows Audit Framework API invocations.

Orchestration

Orchestration Creator: Access and manage configuration settings in the Medallia Experience Orchestration platform. It also grants access to Medallia Experience Cloud and capability to manage Medallia Experience Orchestration data integration settings in Medallia Experience Cloud.
Orchestration Access: Activates the Application switcher, and provides read-only access to the Medallia Experience Orchestration platform.
Orchestration Publisher: Grants the ability to publish, revert changes, and manage the master switch for Medallia Experience Orchestration platform configurations.
Orchestration Workspace Admin: Grants all Creator capabilities plus Datastore management capability in the Medallia Experience Orchestration platform.
Orchestration Tenant Admin: Grants access to API credentials management in the Medallia Experience Orchestration platform.

Mobile

Manage Mobile: Manages all aspects of Medallia Mobile, excluding reporting, in the Mobile Configuration screen in Medallia Admin Suite. This encompasses MM3/Voices enablement, mobile SSO, Voices suggested contacts, security, biometrics, and email configuration.

Action Plans

Manage Action Plans Settings: Manage Settings for Action Plans including metrics, fields, minimum sample size, and notifications.
For more information, see Configure action plans.

AI Configuration

Manage Insights Assistant Configurations: Customizes the underlying AI Agent's behavior. Lets you create, edit, delete, and manage the deployment status of Insights Assistant configurations.
For more information, see Agent Instructions.