Back

This article describes how user permissions work in Tealium iQ Tag Management and describes the steps required to add and edit permissions for single or multiple users.

For server-side permissions, see Managing Server-Side User Permissions.

In this article:

How it Works

There are two categories of user permissions, account-level and profile-level, as described in the following sections. Existing users can view their permission settings and other information from User Settings.

Account-Level Permissions

Account-level permissions pertain to the management of the account, site scans, and profiles. The following table describes the available account-level permissions:

Permission Description
Manage Account
  • Enables the user to assign account-level permissions for other users.
Manage Profiles
  • Enables the user to create, manage, and rename profiles for this account.
Manage Site Scans
  • Enables the user to run and delete site scans.
  • All users can view site scans.

Manage JavaScript Code Extensions

  • Enables the user to edit JavaScript code extensions set up in the account.
  • This permission only applies to legacy JavaScript code extensions. 

Profile-Level Permissions

Profile-level permissions are assigned using one of the following three methods:

  • All Current and Future Profiles
    Use this option for Admin users or any user that requires access to all profiles for the account, including those that will be created in the future.
  • Select from Currently Assigned Profile(s)
    Use this option to filter the available profiles to only those that the user is currently assigned. Select the profiles assigned from the Profile List.
  • Select Profile(s)
    Use this option to edit permissions for the selected profiles in the Profile List.

The following table describes the available profile-level permissions:

Permission Description
Manage Users
  • Add, edit, and remove users and their permissions for this profile.
Manage Tag Templates
  • Edit and delete all tag templates for this profile
Manage Resource Locks
  • Apply and manage resource locks (labels) for variables, tags, load rules, and extensions.
Save Existing Versions
  • Perform a Save for this profile, which overwrites the existing configuration of the version with the new configurations.

Ensure that users with this permissions understand the difference between performing a Save and a Save As.

  • Apply labels to variables, tags, load rules, and extensions.
Save As New Versions
  • Perform a Save As for this profile.
JavaScript Draft Promotion
Publish to Dev Environment
  • Publish to the Dev environment and any custom environments added to this profile.
  • Required to publish to custom publish environments.
Publish to QA Environment
  • Publish to the QA environment.
Publish to Prod Environment
  • Publish to the Prod environment.

Adding a New User

Use the following steps to add a new user and assign permissions:

  1. On the user admin menu, select Manage Users.
  2. In the User Manager dialog, click + Add User.
  3. In the Create New User dialog, enter the user's email address in the New User Email field, then click Next.
    WhiteUI_TiQ_Managign User Permissions in TiQ_Create New User dialog.jpg
  4. Select the account permissions for this user, then click Next.
    select-account-permissions..png
  5. Select Select Profile(s).
    The list of profiles that you have access to is displayed in the Profile List. If you select multiple profiles, you can set permissions for each profile separately, or apply the same permissions to all the selected profiles.
  6. In the Profile List, select the profiles for which you want to assign permissions for the user, then click Next.
    WhiteUI_TiQ_Managing User Permissions in TiQ_Create New User dialog.jpg
  7. Select one or more profile permissions to assign to the user, or select Select All Permissions.
    If you selected multiple profiles, you can click each profile to set permissions. To set the same permissions for all selected profiles, set permissions for one profile, then click Apply Permissions to Selected Profiles.
    TiQApplyPermissionsToSelectedProfiles.jpg
  8. When you finish selecting profile permissions, click Next.
  9. Review and confirm that the selected permissions and publish environments are correct, then click Finish.
    An activation email is sent to the user's email address.
  10. Click Close.

Removing a User

Use the following steps to remove a user's client-side access:

  1. On the User Menu, select Manage Users.
  2. In the User Manager dialog, select the user you want to remove.
  3. Click More and select Remove User.
  4. In the Remove User dialog, confirm the user to be removed, then click Remove User.
    The user no longer has access to the client-side profile.

Changing User Permissions

Editing permissions for users is a separate process from adding or removing permissions. The following sections describe the methods used to edit user permissions:

  • Edit permissions (add and remove) for a single user
  • Add permissions for multiple users
  • Remove permissions from multiple users

Edit Profile-Level Permissions for a Single User

Use the following steps to edit profile-level permissions for a single user:

  1. On the user admin menu, select Manage Users.
  2. In the User Manager dialog, select the user whose profile-level permissions you want to change.
  3. Click Edit/View User Permissions.
  4. Click Select Profiles(s).
  5. In the Profile List, select the profiles for which permissions need to be changed, then click Next.
  6. Edit the profile-level permissions for the user, then click Next.

    Permissions that are not selected are removed for the selected user..

  7. Review and confirm that the updated profile-level permissions are correct, then click Finish.
  8. Click Close.

Adding Profile-Level Permissions for Multiple Users

Use the following steps to profile-level permissions for multiple users:

  1. On the user admin menu, select Manage Users.
  2. In the User Manager dialog, select the user accounts to which you want to add account-level permissions.
  3. In Bulk User Options, click Add Profile Permissions.
  4. Under Profile Options, select either All Current and Future Profiles or Select Profile.
    If you selected Select Profile, select one or more profiles in the Profile List.
  5. Click Next.
  6. Select the permissions to add to the user accounts or select Select All Permissions, then click Next.

    Leaving a permission checkbox blank or deselecting a permissions does not remove that permission from any selected user.

  7. Review and confirm that the selected permissions are correct, then click Finish.
  8. Click Close.

Removing Profile-Level Permissions for Multiple Users

Use the following steps to remove profile-level permissions for multiple users:

  1. On the user admin menu, select Manage Users.
  2. In the User Manager dialog, select the user accounts from which you want to remove permissions.
  3. Click More and select Remove Profile Permissions.

    This step does not remove the All Current and Future Profiles permission. Clicking Remove from Profile removes the users from this profile only.

  4. Select Select Profile.
    Select All Profiles to remove users permissions for all profiles to which you have access. If the users have the All Current and Future Profiles permission, selecting this option removes permissions from all current and future profiles.
  5. Select the profile-level permissions to remove from the user accounts, then click Next.
    The permissions selected to remove are highlighted in red.
    WhiteUI_TiQ_Managing User Permissions in TiQ_Remove Profile Level Permissions_Red Highlight.png

    Leaving a permission unselected or deselecting permissions does not remove the permission from the user accounts.

  6. Review and confirm that the selected permissions should be removed, then click Finish.
  7. Click Close.