Roles and permissions

What each role can do on each entity. Rows marked "only own" or "scope" are filtered by the core on every list, read, update and delete.

Roles

Role	Description
omnichannel:admin	Sets up channels, sending providers and portals; manages templates, campaigns and the suppression list
omnichannel:editor	Writes and publishes templates, runs email campaigns and reads delivery logs
omnichannel:viewer	Read-only view of templates, message logs, campaign results and usage

Access by entity

Entity	omnichannel:admin	omnichannel:editor	omnichannel:viewer
Brand Asset	read, create, update, delete, import, export	read, create, update	read
Email Campaign	read, create, update, delete, import, export	read, create, update	read
Channel	read, create, update, delete, import, export	read	read
Delivery Event	read, export	read, export	read, export
Message Log	read, export	read, export	read, export
Portal	read, create, update, delete, import, export	read	read
Sending Provider	read, create, update, delete, import, export	read	read
Suppression	read, create, update, delete, import, export	read, create	read
Message Template	read, create, update, delete, import, export	read, create, update	read
Template Attachment	read, create, update, delete, import, export	read, create, update, delete	read
Template Version	read, create, update, delete, import, export	read, create	read
Unsubscribe Group	read, create, update, delete, import, export	read	read
Daily Usage	read, export	read, export	read, export