Permission Delegation Rights

This article lists the actions available to accounts or tokens delegated permissions for each management area in Studio.

User Management

Area	Has Permission	No Permission
Create users	Create an account with the role: User or Contact Set the identifier for the account Set the invitation language	Set groups for the new user
View users	View the full user list on the platform Search for users Filter users	—
Edit user accounts	Invited users Change first name, last name, identifier, email, username, and profile fields Set an access code Resend an invitation	Invited users Change user role Set groups for the user
Edit user accounts	Registered users Change first name, last name, identifier, and email Trigger a password reset Set a recovery code Edit profile fields	Registered users Change user role Set groups for the user
Manage account status	Deactivate or reactivate user accounts	Delete users

If the assigned account also has delegated permissions for Groups Management, they can manage group assignments for users.

Area	Has Permission	No Permission
View groups	View all groups on the platform Filter groups by type or creator Search for groups	—
Manage groups	Create, edit, and delete groups	—
Manage members	Add or remove members from groups Import users to groups via CSV	View the profile of a group member

Area	Has Permission	No Permission
CSV Import	Upload CSV files to manage users or contacts Start an import Use all supported import scopes and upload types: Scope: Users and contacts Type: Delta and full uploads Delete an import file	—

Area	Has Permission	No Permission
Microsoft Entra ID and Workday integrations	Create and set up an integration Edit integrations	Delete existing integrations

There is no token assignment for Integrations.