◾User roles in Back Office

Default roles in Smartico

Here you can find roles of the administrative users in the Smartico Back Office

Role	Allowed to do
CRM Manager	Can manage campaigns, segments, assets for communication. Can manage all gamification elements Can access user profiles and: - send messages - adjust points - give/complete missions - change test and opt-out flags - give mini-games spins - give bonuses
CRM Admin	Same as CRM Manager and: - SMS, Mail, IVR gateways - Caps for mails & sms - Brands configurations - Create new Back Office users - Other label level configurations - Access REST API & Keys
CRM Support	Has read-only access to all Marketing & Gamification configurations Can access user profiles: - send messages - adjust points - give missions - give mini-games spins - give bonuses Cannot: - complete missions - change opt-out flags - change test flag
CRM Integration engineer	Same as CRM Support and can additionally: - Access REST API documentation & Keys

Note that each role can be extended with additional permissions or some possibilities can be taken from role, for example - CRM Admin can create a new user with role of CRM Support, but exclude possibility to give bonuses, and additionally to give access to REST API documentation and keys

Authorization with SSO

Smartico supports Single Sign-On (SSO), currently available for Google and Microsoft users, with plans to expand support to other providers in the future.

To enable SSO, the client needs to provide the email domain(s) used in their Google Workspace (e.g., mycompany.com). This setup allows users with emails under the specified domain (e.g., [e-mail]) to log in using SSO.

Note: Smartico is not supporting authorization using personal mails managed under generally available domains like googe.com, yahoo.com etc. Only company managed emails/domains are supported

When enabling SSO client must provide:

1. The Smartico label(s) to which authorized users will have access. The default permission role to be assigned to new users (e.g., "CRM Support," "CRM Manager," etc.).

2. The default permission role to be assigned to new users (e.g., "CRM Support," "CRM Manager," etc.).

3. List of campaign owned mail domains, e.g. mycompany.com

4. If to allow user creation on Smartico side when new user logins through SSO (in such case p1 and p2 are not needed)

The logic of user matching and permissions assignment

• For new users: New users logging in via SSO will automatically be assigned access to the specified label(s) and the default permission role. A CRM Admin can later adjust these permissions as needed.

• For existing users: If an existing user logs in via SSO, they will be matched by their email address and retain their current set of permissions.