◾User roles in Back Office

Default roles in Smartico

Here you can find roles of the administrative users in the Smartico Back Office

Role	Allowed to do
CRM Manager	Can manage campaigns, segments, assets for communication. Can manage all gamification elements Can access user profiles and: - send messages - adjust points - give/complete missions - change test and opt-out flags - give mini-games spins - give bonuses
CRM Admin	Same as CRM Manager and: - SMS, Mail, IVR gateways - Caps for mails & sms - Brands configurations - Create new Back Office users - Other label level configurations - Access REST API & Keys
CRM Support	Has read-only access to all Marketing & Gamification configurations Can access user profiles: - send messages - adjust points - give missions - give mini-games spins - give bonuses Cannot: - complete missions - change opt-out flags - change test flag
CRM Integration engineer	Same as CRM Support and can additionally: - Access REST API documentation & Keys

Note that each role can be extended with additional permissions or some possibilities can be taken from role, for example - CRM Admin can create a new user with role of CRM Support, but exclude possibility to give bonuses, and additionally to give access to REST API documentation and keys

Additional and restriction roles

Operator can give what is called "Additional roles" to the users.

For example, the CRM Support role doesn't have permission to "Complete missions" manually for the players, but the role can be given to particular user ass "Additional role"

Also, some permissions can be taken away on user level using "Restriction roles", for example to remove permission to adjust points

Current restriction roles that can be taken away from the user

Role	Explanation
Don't allow to adjust points	Removes permission to adjust gamification points for player
Don't allow to send personal messages	Removes permission to send communication in manual way from the player profile
Don't allow to export segment	User won't be able to export segments
Hide links in SMS & Mail communication	When looking on the communication history and content of mails/sms/popups, user won't see the actual links
Don't allow to give bonus from user profile	User won't be able to give bonus manually to the player
Don't allow to read content of sent mails/sms/popups	User won't be able to see content of send communication, but will see only the facts that communication was sent
Don't allow activation of Campaigns & Rules	Users won't be able to activate campaigns or automation rules or do any changes in already active campaigns and rules. They can still created drafted versions that will be activated by other users with higher permissions
Don't allow to give mini-game attempts	User won't be able to give mini-game attempts manually to the player
Don't allow to give mission manually	User won't be able to give missions manually to the player
Don't allow giving raffle tickets from user profile	User won't be able to give raffle tickets manually to the player

Authorization with SSO

Smartico supports Single Sign-On (SSO), currently available for Google and Microsoft users, with plans to expand support to other providers in the future.

To enable SSO, the client needs to provide the email domain(s) used in their Google Workspace (e.g., mycompany.com). This setup allows users with emails under the specified domain (e.g., [e-mail]) to log in using SSO.

Note: Smartico is not supporting authorization using personal mails managed under generally available domains like googe.com, yahoo.com etc. Only company managed emails/domains are supported

When enabling SSO client must provide:

1. The Smartico label(s) to which authorized users will have access. The default permission role to be assigned to new users (e.g., "CRM Support," "CRM Manager," etc.).

2. The default permission role to be assigned to new users (e.g., "CRM Support," "CRM Manager," etc.).

3. List of campaign owned mail domains, e.g. mycompany.com

4. If to allow user creation on Smartico side when new user logins through SSO (in such case p1 and p2 are not needed)

The logic of user matching and permissions assignment

• For new users: New users logging in via SSO will automatically be assigned access to the specified label(s) and the default permission role. A CRM Admin can later adjust these permissions as needed.

• For existing users: If an existing user logs in via SSO, they will be matched by their email address and retain their current set of permissions.