User Doc: Permissions Needed for API Partners

.jira-issue { padding: 0 0 0 2px; line-height: 20px; } .jira-issue img { padding-right: 5px; } .jira-issue .aui-lozenge { line-height: 18px; vertical-align: top; } .jira-issue .icon { background-position: left center; background-repeat: no-repeat; display: inline-block; font-size: 0; max-height: 16px; text-align: left; text-indent: -9999em; vertical-align: text-bottom; } ALLI-9439

The Objective for this document was to provide information to our users around permissions needed to create/update/edit audiences on our vendor deployments (i.e. API Partners).

Deployment Vendor	User Permissions Required	Notes / References
Facebook	The ads_management permission is required to create and update custom audiences.	https://developers.facebook.com/docs/marketing-api/audiences/overview
Twitter	Ads API access For access to the Audience endpoint, you will need to be added to an allowlist. Please fill this form and accept the new Twitter Ads Products and Services Agreement if initially accepted prior to 2018-08-01	https://developer.twitter.com/en/docs/twitter-ads-api/audiences/guides/audience-api-integration API reference index \| Docs \| Twitter Developer Platform
LinkedIn	Open Permissions (Consumer) Marketing Permissions *read in-detail below	https://learn.microsoft.com/en-us/linkedin/shared/authentication/authentication?toc=%2Flinkedin%2Fmarketing%2Ftoc.json&bc=%2Flinkedin%2Fbreadcrumb%2Ftoc.json&view=li-lms-2023-08 https://learn.microsoft.com/en-us/linkedin/shared/authentication/getting-access
Facebook Offline Events	To use, you need Meta Business Manager If you are a third-party partner offering offline conversions functionalities for advertisers that use your services: Your app must go through app review. You must request the `ads_management` permission during app review.	https://developers.facebook.com/docs/marketing-api/offline-conversions/
The Trade Desk	To access the platform API, you need the following: The platform API credentials provided by your Account Manager. An authentication token that you can request to get generated (raise a support request or ask the question in #alli-audiences slack channel) and place in the header of your integration.	https://api.thetradedesk.com/v3/portal/api/doc/Authentication
Snapchat	The Snapchat Marketing API uses access tokens to control access and authenticate requests, the access token will reflect the user permissions when used in API requests.	Organization Roles & Permissions Snapchat Marketing API Authentication Snapchat Marketing API FAQs

Additional Notes:

LinkedIn Permissions:

Open Permissions (Consumer):

Product/Program	Permission	Description
Sign in with LinkedIn using OpenID Connect	profile	Member Auth: Retrieve authenticated member's name, headline, and photo.
Sign in with LinkedIn using OpenID Connect	email	Member Auth: Retrieve authenticated member's primary email address.
Share on LinkedIn	w_member_social	Member Auth: Post, comment and like posts on behalf of an authenticated member.

Marketing Permissions:

Product/Program	Permission	Description
Advertising APIs	rw_organization_admin	Member Auth: Manage an authenticated member’s company pages and retrieve reporting data.
Advertising APIs	r_organization_admin	Member Auth: Retrieve an authenticated member’s company pages and their reporting data.
Advertising APIs	w_organization_social	Member Auth: Post, comment and like posts on behalf of an organization. Restricted to organizations in which the authenticated member has one of the following company page roles. `ADMINISTRATOR` `DIRECT_SPONSORED_CONTENT_POSTER` `LEAD_GEN_FORMS_MANAGER`
Advertising APIs	r_organization_social	Member Auth: Retrieve organizations' posts, comments, and likes.
Marketing Developer Platform (MDP)	w_member_social	Member Auth: Post, comment, and like posts on behalf of an authenticated member.
Advertising APIs	rw_ads	Member Auth: Manage and read an authenticated member's ad accounts. Restricted to ad accounts in which the authenticated member has one of the following ad account roles. `ACCOUNT_BILLING_ADMIN` `ACCOUNT_MANAGER` `CAMPAIGN_MANAGER` `CREATIVE_MANAGER`
Advertising APIs	r_ads	Member Auth: Read an authenticated member's ad accounts. Restricted to ad accounts in which the authenticated member has one of the following ad account roles: `ACCOUNT_BILLING_ADMIN` `ACCOUNT_MANAGER` `CAMPAIGN_MANAGER` `CREATIVE_MANAGER` `VIEWER`
Advertising APIs	r_ads_reporting	Member Auth: Retrieve reporting for advertising accounts.
Advertising APIs	r_1st_connections_size	Member Auth: Retrieve the count of an authenticated member's 1st-degree connections.
Advertising APIs	r_basicprofile	Member Auth: Read an authenticated member's basic profile including name, photo, headline, and public profile URL.
Lead Sync	r_marketing_leadgen_automation	Member Auth: Access your lead generation forms and retrieve leads (including event leads, ad leads, and organization page leads).
Audiences	rw_dmp_segments	Member Auth: Create and manage matched audiences.