Open navigation

About data source permissions and access requirements

This guide will walk you through the permissions and access requirements for most data sources. This list is not exhaustive but will be updated over time to include all data sources we support.


Data SourceAccess Requirements for User AccountOther Notes/References
AdformRequires user to have "External API" access enabled. They will also need sufficient access to specific clients to be able to read their data.

"Advertiser" or "Agency" access level, as part of Buyer Solution category.
Enabling External API
Adobe Analytics &
Adobe Analytics 2.0
Valid Adobe ID linked to Experience Cloud and has "Web Service Access" enabled for the account. Also requires explicit access granted to see the report suites, reports, segments, and custom fields.

As the platform's permissions are high customizable and will vary from account to account, you must contact your Adobe system administrator for help enabling all the pieces.
AdRoll"Administrator" or "General User" access level. 
Ahrefs"Admin" or "Owner" access level and a Lite level subscription.
Apple Search Ads
  • "API Account Read-only" or "API Account Manager" access level. API user can be added by a user with "Account Admin" access.
  • You need a Client ID, Team ID, and Key ID which you get by generating an API client.
AwinAPI credentials are required. Generate API credentials. 
Bing Webmaster ToolsRequires an "API key" in order to be able to access and use Bing Webmaster APIs. This API key can be generated from Bing Webmaster Tools. 
CallRailRequires an "API key" with "Admin", "Manager", or "Reporting" access level.

To generate an API Key: 

CallRail's API documentation

For user settings:

Capterra PPC"API access" and "API key" to be enabled by the Capterra account manager.
Capterra Reviews
  • A Capterra product identifier for search. This identifier can be taken from the URL of the product page in Capterra. For example, if the product URL in Capterra is " https://capterra.com/p/135003/Slack/", the identifier is 135003.

Clockify 
  • "Admin" access level.

  • "API key" that can be generated from Clockify profile settings.
Criteo
  • Valid App with Client ID and Client Secret.
  • App must be set to at least "Read" access for all elements of the Marketing API.
Accessing Criteo
Facebook Ads
  • Valid Facebook user account with at least an "Employee Access" with the View Performance option enabled to an ad account. Or, "Ad Account Analyst" access to an ad account.

  • For Lead data access, the user must either be a "Lead Manager" or a "Page Admin". For agencies, "Page Admin" access level.

  • If connected to New Page Experience, you must have "Partial Access" to the linked Facebook account.
Facebook Business Manager"Finance Editor" access level is required.
Facebook Political Ads
  • Requires confirming your Identity on Facebook settings.

  • Requires creating a "Facebook developer application".
Authenticating Facebook Political Ads
Facebook Insights
  • Valid Facebook user account with either "Administrator" access to a specific page, or if connected with the Business Manager at least "Page Editor" access to a page.

  • If connected to New Page Experience, you must have "partial access" to the linked Facebook page.
Google AdsValid Google account with at least "Read Only" access to a Google Ads account or MCC.
Google Ad Manager
  • Valid Google account with at least "Trafficker" access for the account.

  • "API access" must be explicitly enabled by the Administrator.

Note that this platform allows for custom roles/access, so you may need to talk to your Administrator for help.
Google AdSense

A valid Google AdSense account with "Admin" access level.

Manage user access to your account
Google AnalyticsValid Google account with at least "Read & Analyze" access to Property and View level.
Google Analytics 4Valid Google account with at least "Read & Analyze" access to Property level.
Google BigQuery
  • For Dataset, you will need both "BigQuery Data Viewer" and "BigQuery User" access.

  • For Project, you will need only a "BigQuery User" access.
Google Campaign Manager 360
  • Valid Google user account with appropriate "User Role" set for the reporting content they need to see (variable based on what admin set for the role).

  • May need "API access" for the account enabled by Google rep or Campaign Manager support team.

Google Display & Video 360Valid Google user account with "Standard" or "Admin" access.Managing user access
Google My Business

A valid Google account with at least an "Owner" or "Manager" access.

Add and removing listing owners and managers

Google Search Ads 360 Valid Google user account with at least "Advertiser Manager" or "Agency Manager" user role.Add, edit or remove users in Search Ads 360
Google Search ConsoleTwo kind of owners: "Verified Owner" and "Delegated Owner."Verify your site ownership
HubSpotValid Hubspot account with "Admin Rights". For full access, the user role "Super Admin" or "Owner" is required.HubSpot permissions
Instagram InsightsValid Facebook user account linked to an Instagram account, with same permissions as Facebook Insights above for the Instagram-linked FB page.

If the Facebook page the Instagram account is linked to is rolled into the New Page Experience, you must have "full control access" to the linked Facebook page.
Instagram Public DataValid Facebook user account linked to an Instagram account (either Business or Creator profile) with a "Manage Page" user role level. 

Manage roles on a shared Instagram account


Klaviyo

Valid Klaviyo account with an "Admin", or "Owner" or "Manager" user role level.


An API Key must be created.

LinkedIn AdsValid LinkedIn user account with at least "Viewer" access to an ad account.

"Admin-level page access" is required for creative level granularity (content and metadata of the ads). Please find more information from this guide.
LinkedIn Company PagesValid LinkedIn user account with "Super Admin" or "Content Admin" access.Adding admin access to LinkedIn Pages
MailchimpValid Mailchimp user account with "Admin" or "Owner" level. Granting access to Mailchimp accounts
Microsoft AdvertisingValid Microsoft user account with at least "Advertiser Campaign Manager" access to an ad account.

Multi-factor authentication must be enabled for the Microsoft user account.
Granting access to Microsoft Advertising account

Microsoft account security info & verification codes
Netvisor

To enable Supermetrics for Netvisor, you must go to the Netvisor Store and enable the connection there.

No specific user role level is required for this data source. 

Omnisend
  • eCommerce store or website
  • Connect your eCommerce store to your Omnisend account. 
  • Generate an API key.

Outbrain AmplifyAPI access
Contact your account manager at Outbrain to allowlist API access for your account. Alternatively, fill out this form requesting API access from Outbrain.
Optimizely 

Valid user account with at least "Administrator" or "Pro" access to an ad account. 

Granting access to Optimizely account
Pinterest Ads Valid Pinterest user account with at least "Admin" or "Campaign" access to an ad account. 

Valid Pinterest user account with at least "Admin" or "campaign" access to an ad account. 

Pinterest Organic

The user must be logged in as the "owner" of the profile (advertising account access is not enough).


The profile queried must be a business profile.

Authenticating Pinterest Organic
SalesforceUser must have API access enabled on their user profile in Salesforce and have rights to the objects, fields, and data they want to fetch.

As the platform's permissions are high customizable and will vary from instance to instance, you must contact your Salesforce system administrator for help enabling all the pieces.
Troubleshooting Permissions Issues with Salesforce
Salesforce Marketing Cloud

Requires a Salesforce Marketing Cloud account, which is either Pro, Corporate, or Enterprise edition.


Requires a Salesforce Marketing Cloud user with the role of Administrator or Marketing Cloud Administrator.

Authenticating Salesforce Marketing Cloud
SearchmetricsUser must need an API Key and an API Secret.

A valid "administrator" user role.
Semrush AnalyticsA Semrush subscription and an API key are required. 


No user role level is required.

Subscription and API key
SemRush API units
Semrush Projects

A Semrush subscription and an API key are required.


No user role level is required.

Subscription and API key
Semrush API units
Snapchat MarketingA valid Snapchat user account with at least "Account Admin" or "Campaign Manager" access to an ad account. Roles and permissions
Snowflake

For an oAuth connection, you must need a valid ACCOUNTADMIN and create a Client ID and Client Secret. In addition, you need hostname, warehouse name, database name and database schema to establish the connection.

For a database connection, you must need a username, password, hostname, warehouse name, database name and database schema.

How to create an OAuth Client 


Shopify

A "Shopify Store Owner Account" or "Shopify Staff Account".

Authenticating Shopify
StackAdaptAn API Key is required. The key can be created by your StackAdapt Account Manager.  
StripeAn Administrator user role level is required. 

TaboolaA valid Taboola user account with at least "Account Manager" access. Account Administration
The Trade DeskA Trade Desk API access must be enabled, which can be requested through The Trade Desk account manager.


"Partner-level" reporting access is required.


TikTok Ads "Ad account Analyst" user role level is required.

Manage permissions on TikTok Business Center


Tripadvisor Reviews"Location ID" of the venue.Tripadvisor authentication guide
Twitter AdsValid Twitter user account with at least "Campaign analyst" access to an ad account.Details for granting ad account access

Note that some dimensions may require "Ad Manager" or higher access to see.
Twitter Premium

Valid Twitter user accountMulti-account access not possible. Must have access to each account separately, and authenticate each separately

Yahoo Native Ads

A valid Yahoo Native Ads account with at least an "Admin" or "Campaign Manager" access.

Account permissions
Yahoo DSP"API access" and a Client ID and Client secret.
Generate API
Yandex DirectA valid Yandex Direct account with at least a "Chief Representative" or "Representative" user role.

Roles and access of Yandex.Direct users

Yandex Metrica

A valid Yandex Metrica account with a tag installed. 


A valid "Chief Representative" or "Representative" user role.


YouTubeFor brand accounts, you must have a "Content Manager" access level. For other accounts/channels, it is required to be the "Owner" of the channel. Please refer to this Google documentation to see whether your Youtube account is a standard or a brand account. 

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.