Mapp Engage uses a role-based permission system to control what users can see and do within the platform. Instead of assigning individual permissions to users, Engage assigns permissions to roles. Each user account is then linked to one or more roles.
This approach ensures that access rights are consistent, secure, and aligned with your team’s responsibilities.
System Roles, Group Roles, and Contact Roles
System roles control access to global features, personal data, and administrative tasks. Every system user is assigned one system role.
Group roles define what a user can do within a specific group – such as importing contacts or sending messages.
Contact and guest roles are used for non-user accounts. These roles do not allow access to the Engage interface but may allow certain actions like managing one’s own profile or receiving forwarded messages.
The combination of system and group roles defines each user’s effective permissions.
Permission Types in Engage
Engage permissions fall into three main categories:
Global permissions
These grant access to general features, system administration, data export, and automation tools. They are assigned to system roles.
Group permissions
These define what users can do within specific groups – for example, managing members or sending group messages. Group permissions can be assigned in three ways:
As general permissions, applied to all groups where the role is used
As group-specific permissions, customized for a particular group
As group-override permissions, applied through system roles regardless of group membership
Personal data permissions
Some permissions grant access to sensitive contact data, such as profile attributes, tracking history, or billing information. To meet data protection standards, access to these permissions should be limited to users with a justified need.
You can configure custom roles to reflect the responsibilities and data access required for each type of user.
How Permissions Are Applied
Roles are assigned when creating or editing user accounts.
A user’s system role defines their general platform access and data permissions.
One or more group roles define what the user can do within each group.
Permissions cannot be assigned directly to users – they are always tied to roles.