User roles in MediaOS determine what each user can view, edit, and access across the platform. Assigning the appropriate role ensures that each team member has the tools they need—without exposing sensitive data or administrative controls unnecessarily. Below is a breakdown of permissions by role to guide you when assigning access.
Sales User Role #
The Sales role is designed for account executives and sales reps who need access to client interactions, proposals, and select reports. Users with this role can view accounts, agencies, deals, and proposals they’ve sold, along with associated invoices, payments, insertions, ad requests, editorials, flat plans, and projects.
Sales users can also access the Digital Display Server and Studio Services (excluding credit purchasing or file submissions). They’ll see reporting for only the accounts assigned to them, including Goals, Activity List, Sales Run Sheets, Product Sales Analysis, Commissions, and various performance and forecast reports filtered by user.
They also have access to their own calendar, email templates, and can view and copy products, but cannot create or edit them.
Sales Manager Role #
The Sales Manager role is intended for sales directors and managers who oversee team performance and need broader access across accounts. This role should be enabled in conjunction with the Sales role.
Sales Managers can access all contracts, deals, agencies, insertions, ad requests, editorials, flat plans, and studio credits (including purchasing), across users. They also have full visibility into Sales Management and Accounting reports, including custom reports, trends, commissions, page counts, forecast analysis, and year-to-date comparisons.
This role includes access to campaigns, email templates, landing pages, and the user’s connected calendar. It also unlocks deeper marketing and web activity insights.
Accounting Role #
The Accounting role is designed for finance and billing team members responsible for managing contracts, invoices, payments, and revenue reporting.
Accounting users have access to all account-level billing information, including payment plans, QuickBooks integration, scheduled auto-payments, and invoice line items. They can also view ad requests, editorials, flat plans, digital display servers, and studio service orders.
They have access to all major accounting and financial reports such as Invoice Aging, Invoice Summary & Analysis, Commissions Paid, Transaction Summary, and Applied Payments, as well as custom reports. Product access is limited to view and copy only.
Metrics Role #
The Metrics role is focused entirely on reporting. It is ideal for data analysts or leadership roles that require access to platform-wide insights but don’t need to create or manage records.
Metrics users can view every system report—including Goal tracking, Product Sales, Forecasting, Contract Counts, Discount Averages, and Commissions—without having editing permissions across accounts or modules. Product access is also limited to view and copy only.
Editorial Manager Role #
The Editorial Manager role is built for users overseeing content, editorial planning, and production schedules. This role provides access to accounts (assigned or shared), notifications, calendar, contracts (view only), and studio files.
Editorial managers can manage ad requests, flat plans, content entries, the social calendar, studio workflows, and any shared reports or tasks. Product permissions are limited to view and copy access only.
Delivery/Production Role #
The Delivery/Production role is intended for users handling ad fulfillment and production logistics. These users have access to assigned accounts, agencies, contracts they've sold, and all insertions and ad operations including Flat Plans, Digital Display Servers, Editorials, and Studio Services (view-only).
They also have access to Account Transfers, Activity Lists, their calendar, campaign records, and email templates. Product access is limited to view and copy functionality.
Administrator Role #
The Administrator role grants full access to all users, reports, and modules across MediaOS. This role should be assigned to only a few trusted individuals responsible for platform-wide configuration and system-level decisions. Administrators can create and manage users, assign permissions, configure products, manage integrations, and oversee all reporting and data tools.
