Skip to main content
Gainsight Inc.

Role-Based Access Control

  1. Last updated
  2. Save as PDF

This article explains how role-based access control provides fine-grained access to relevant functionality that allows your team to safely work on designated areas of responsibility.

Overview

Role-based access control ensures that the data and assets are protected and helps you manage who has access to Gainsight PX and what they can do with the access. Role-Based Access Control allows you to grant access to Gainsight PX that you control.

Business Use Cases: 

  • Allow one user to manage all the roles as an administrator in a subscription and another user to manage specific roles such as only Engagements or Analytics.
  • Allow a UX member to manage engagement templates in a subscription.
  • Allow a user to manage or view the product instrumentation via the Product mapper.
  • Allows a user to view and launch engagements across channels.

User Management 

You can add and manage users from the Administration > User Management page. The total number of user logins created for the respective Gainsight PX instance is also displayed.

Note: The presence of the admin icon in the Admin column denotes that the user has been granted Full administrative privileges. For more information on Full administrative privileges, refer to the Apply Role-Based Access Control section of this article. 

You can perform the following actions on the User Management List View page.

  • Deactivate a user: This stops the user from logging in to the respective Gainsight PX instance until it is reactivated. 

Note: Click on the Deactivate icon again to reactivate the user. 

Deactivate.jpg

  • Edit user control configurations.

Edit.jpg

  • Delete a user: This deletes the user data permanently. 

Note: You cannot evoke a user once deleted.

delete.jpg

Role-Based Access Control in Gainsight PX

Role-based access control is the way that you manage access to Gainsight PX. In this section, you grant a user access to manage and/or view one or multiple roles. Implement the role-based access control to check the access to datasets within Gainsight PX based environment. This enables you to control who can manage them, and subsequently access and use them. Furthermore, it enables the possibility of setting some attributes to determine whether certain accesses should proceed or be terminated.

If you don't have a Gainsight PX subscription, create an account before you begin.

Use Role-Based Access Control in Gainsight PX

  1. Log in to the Gainsight PX portal at https://www.gainsight.com/product-ex...product-teams/

Gainsight PX Login.png

You will be navigated to the Dashboard of Gainsight PX > subscribed environment.

Dashboard.jpeg

  1. Navigate to Administration > User Management.
  2. Click + New User. The New User window appears. Refer to the following image.
  3. Enter the First Name, Last Name, and Email of the user whom you want to provide access.
  4. Select the checkbox of specific role(s) for a user whom you want to provide access to manage and/or view one or multiple roles.

New User Management.png

Apply Role-Based Access Control

Gainsight PX provides powerful role-based access control. It is advised to apply role-based access control and assign different permissions to the relevant users. Note that its granularity varies from instrumentation, admin settings, engagement to template creation.

The following section describes different types of roles. Every Role has two levels of access: Manager and Viewer. Only the Engagements role has Editor access along with Manager and Viewer options.

When you select the Full Administrative privileges checkbox, you allow your new user to access data related to all the roles and the new user can manage, view, and edit.

Full Admin Privileges.png

  • Audience: Gainsight PX’s powerful platform is continuously collecting your product's usage data as your users use your product. This is where audiences & audience selection come into play. Audience selection can be applied all over the Gainsight PX platform. While adding a new user, if you select the checkbox for Manager option under Audience, it will automatically select the Viewer option. This means the new user will be able to manage and also view the data related to the Audience. If you select only the Viewer option, the new user will not be able to edit but only view the data.
  • Segments: This refers to the Segments filter configuration. When you select the Manager option checkbox, you enable your new user to create, edit, and delete Segment filters. The Viewer option allows your users only to view the configured Segment filters list.

For more information about Segment and its integration, refer to the Use Segment article from the Additional Resources section.

  • Analytics: Selecting the Manager checkbox enables your new user to manage product analytics and relevant user feedback to understand what product features your users value most and which areas of the product are ripe for enhancements. The Viewer option allows your new user to only view the same data and restricts the user from making any changes or performing any other tasks.
  • Product Mapper: If you select the Manager checkbox for this role, you will enable your new user to map features and create a product feature tree. The user can view and manage each mapped feature hierarchically within the Product Feature Tree.
    The new user can also organize the features any way that makes sense for your particular application only if the user has the Manager level of access. The Viewer has read-only permissions.
  • Account Settings: Selecting the Manager checkbox enables your new user to manage the web application and track real-time events (page view, sessions, clicks) to Gainsight PX along with their respective user and account information. The new user can also create attributes from Administration > Attributes > +New. The Viewer option lets your new user access the data in view-only mode.
    Account_attributes.png
  • Templates: When you select the Manager checkbox for this role, you enable your new user to format Template layouts for using in engagements or email. The new user will also be allowed to set up and configure the engagement/email layouts. The Viewer option will let your new user to access the default templates while creating engagements (with Manager permission enabled) or email. You cannot customize templates with the Viewer permission.
  • Engagements: Engagement is split to viewer, editor and manager. Users with Manager permissions are allowed to launch and edit the in-app Engagement. If you select the Production Launcher check box for this role, you will enable your new user to launch engagements in the Production environment. For more about Environment settings, refer to the Gainsight PX Environment Settings article from the Additional Resources section. If you select the Manager checkbox for this role, you will enable your new user to create, edit, and launch engagements at the desired time. The new user can even see how the engagement will look and behave in the product by using Preview functionality. Users with manager permissions are allowed to launch and edit Guides in-app.
    • If you select the Editor checkbox for this role, you will enable your new user to create, edit, and preview engagements at the desired time. However, your users do not have permission to launch the engagement.
    • If you select the Viewer checkbox for this role, you will enable your new user only to view the engagement list.
      Engagements - User management.png