Skip to main content
Log inGet a demo

Announcing Advanced User Permissions for Hightouch

Learn how you can start leveraging advanced access management features in Hightouch with role-based and label-based controls.

Kashish Gupta.

Kashish Gupta

July 27, 2022

5 minutes

Announcing Advanced User Permissions for Hightouch.
  • Actions represent the tasks that specific roles can perform (e.g., create, read, update, delete, etc.)
  • Those actions can be performed on Hightouch resources (sources, destinations, models, syncs, Audiences, and parent models).
  • (Optional) Conditions can also be applied to give admins even more granular control over how and when policies are applied (e.g., labeling a sync project:marketing).
  • Image of Access Control Diagram

    Advanced Access Control in Hightouch

    Here are some ways these controls can be customized to solve business use cases:

    • Process Enforcement: marketers can create audiences and syncs but cannot access raw data in sources and parent models.
    • Visibility and Security: all users can view a critical sync, but only a select group can edit it.
    • Data Hygiene: an ad-hoc set of models and syncs for a specific campaign only needs to be shared with the team working on the campaign.
    • Resource Protection: a highly privileged Snowflake account can only be viewed by admins and the Hightouch system for syncing purposes.
    Josh Curl.

    Hightouch helps some of the largest companies in the world sync mission-critical data to their business tools. In such high-stakes environments, proper governance is key to protecting against unauthorized data access and user errors that can break the pipeline. With industry-leading granular role-based and label-based access controls, users can be confident that they won't be compromising on security or governance as they invite more users to collaborate.

    Josh Curl

    Josh Curl

    Co-Founder & CTO at Hightouch

    An Example of How it Works

    Let's say a large consumer enterprise wants to create an "Audience Collaborator" role for marketers who should be able to create Audiences but should not have the ability to change the underlying schema (model).

    A workspace admin would create the two policies below:

    Policy 1 — Lets user create audiences and syncs for the specific project tagged

    • Actions: create, read, update, delete, preview, enable
    • Resource: sync, audience, sync template
    • Conditions: project is demand-gen-prod

    Policy 2 — Limits the user's ability to change the underlying schema

    • Actions: read, preview
    • Resource: audience schema

    Currently, Hightouch supports these inputs through a JSON format. Soon, we will be releasing a UI for quicker configuration.

    Below is the corresponding UI experience for the Audience Collaborator role as compared to the admin view.

    Image of Admin View

    Admin View

    Image of Admin View

    Audience Collaborator View

    Our Governance Roadmap

    With this launch, we're proud to stay on the leading edge of data governance for Reverse ETL platforms. We have an aggressive roadmap and plan to bring additional cutting-edge access management features to Hightouch, including tracking user activity, managing column-level controls, and more.

    Next steps

    These advanced access management features are available today for Business Tier customers. Jump to the Members tab in your application settings to get started. You'll be prompted to speak with a sales engineer to help you create your first custom policy. You can read more about these features in Docs.

    More on the blog

    • What is Reverse ETL? The Definitive Guide .
  • Friends Don’t Let Friends Buy a CDP.
  • Snowflake

    Marketplace Partner of the Year

    Gartner

    Cool Vendor in Marketing Data & Analytics

    Fivetran

    Ecosystem Partner of the Year

    G2

    Best Estimated ROI

    Snowflake

    One to Watch for Activation & Measurement

    G2

    CDP Category Leader

    G2

    Easiest Setup & Fastest Implementation

    Activate your data in less than 5 minutes