During installation of the Click solution, four security roles are created in Dynamics. These roles are specific to Click and have very different purposes.
Every Dynamics user needing access to Click should be assigned a Click security role. The descriptions below outline how you should assign these roles to your users. Should the default Security Roles not meet some users' security needs, you can also create custom Security Roles.
Permissions
Core
This role should be assigned to all users, even users not using Click. It contains the minimum set of privileges that are required by the Click plugins and will prevent failures in creating Leads, Contacts and Opportunities.
It includes the Write privilege for 10 of our entities, including Subscription Preferences, Email Events, Sent Emails, Posted Forms, etc. So if a User qualifies a Lead into a Contact, the Lead's related records will be transferred to the new Contact and in order for that to successfully occur, the Core User has Write privileges.
Core Security Role Settings ❯
User
This security role should be assigned to users (non-administrators) who view data generated by Click or users who will be accessing and utilizing the Click features. Most of the privileges are set to the Read level so the users can view the tracking data. This role also allows the user the ability to send emails and to access most of the Click features.
User Settings ❯
Service
This role should be assigned to the Click Service User or your Click Application User if you do not wish to use the Dynamics System Administrator role. This role provides full access to Click functionality, so it can also be assigned to Click power users.
The user set up as the Click service user must be set to have the Read-Write Access Mode, not Administrative or Read-only.
Service User Settings ❯
Lock Email Blocks
This role should be assigned to users who need to be able to lock and unlock blocks in the Email Designer and Drag and Drop email editors. When a block is locked, only users with this role can modify its contents. More here.
Allows users to lock email blocks in the Drag & Drop email template designer so that users without this role cannot edit them.
Lock Email Blocks Settings ❯
Location
Security Roles can be found by navigating to Settings > Security > Security Roles or Advanced Settings > Settings > Security > Security Roles in UCI environments.