This guide will walk you through the permissions and access requirements for most data sources. This list is not exhaustive but will be updated over time to include all data sources we support.
| Data Source | Access Requirements for User Account | Other Notes/References |
|---|---|---|
| Adform | Requires user to have "External API" access enabled. They will also need sufficient access to specific clients to be able to read their data. A valid "Advertiser" or "Agency" user role, as part of Buyer Solution category. | Enabling External API |
| Adobe Analytics & Adobe Analytics 2.0 | Valid Adobe ID linked to Experience Cloud and has "Web Service Access" enabled for the account. Also requires explicit access granted to see the report suites, reports, segments, and custom fields. As the platform's permissions are high customizable and will vary from account to account, you must contact your Adobe system administrator for help enabling all the pieces. | |
| AdRoll | Valid "Administrator" or "General User" level role. | |
| Ahrefs | Valid Ahrefs account with an "Admin" or "Owner" level role and at least a Lite level subscription. | |
| Apple Search Ads |
| |
| Bing Webmaster Tools | Requires an API key in order to able to access and use Bing Webmaster APIs. This API key can be generated from Bing Webmaster Tools. | |
| CallRail | Requires an API key with a valid "Admin", "Manager" or "Reporting" user role. | To generate an API Key: For user settings: |
| Capterra PPC | "API access" and "API key" to be enabled by the Capterra account manager. | |
| Capterra Reviews |
| |
| Criteo | Valid App with Client ID and Client Secret.
| Accessing Criteo |
| Facebook Ads | Valid Facebook user account with at least an "Employee Access" with the View Performance option enabled to an ad account. Or, "Ad Account Analyst" access to an ad account. For Lead data access, the user must either be a "Lead Manager" or a "Page Admin" to see the data. For agencies, they must be a "Page Admin". If connected to New Page Experience, you must have partial access to the linked Facebook account. | |
| Facebook Political Ads | Requires confirming your Identity on Facebook settings. Requires creating a Facebook developer application. | Authenticating Facebook Political Ads |
| Facebook Insights | Valid Facebook user account with either "Administrator" access to a specific page, or if connected with the Business Manager at least "Page editor" access to a page. If connected to New Page Experience, you must have partial access to the linked Facebook page. | |
| Google Ads | Valid Google account with at least "Read only" access to a Google Ads account or MCC. | |
| Google Ad Manager | Valid Google account with at least "Trafficker" role for the account. API access must be explicitly enabled by the Administrator. | Note that this platform allows for custom roles/access, so you may need to talk to your Administrator for help. |
| Google AdSense | A valid Google AdSense account with at least an "Admin" user role. | Manage user access to your account |
| Google Analytics | Valid Google account with at least "Read & Analyze" access to Property and View level. | |
| Google Analytics 4 | Valid Google account with at least "Read & Analyze" access to Property level. | |
| Google BigQuery | For Dataset, you will need both "BigQuery Data Viewer" and "BigQuery User" role levels. For Project, you will need only a "BigQuery User" role level. | |
| Google Campaign Manager 360 | Valid Google user account with appropriate User Role set for the reporting content they need to see (variable based on what admin set for the role). May need API access for the account enabled by Google rep or Campaign Manager support team. |
|
| Google Display & Video 360 | Valid Google user account with "Standard" or "Admin" user role. | Managing user access |
| Google My Business | A valid Google account with at least an "Owner" or "Manager" user role. | |
| Google Search Ads 360 | Valid Google user account with at least "Advertiser Manager" or "Agency Manager" user role. | Add, edit or remove users in Search Ads 360 |
| Google Search Console | Two kind of owners: Verified Owner and Delegated Owner | Verify your site ownership |
| HubSpot | Valid Hubspot account with minimum "Admin Rights". For full access, the user role "Super Admin" or "Owner" is required. | HubSpot permissions |
| Instagram Insights | Valid Facebook user account linked to an Instagram account, with same permissions as Facebook Insights above for the Instagram-linked FB page. If the Facebook page the Instagram account is linked to is rolled into the New Page Experience, you must have full control access to the linked Facebook page. | |
| Instagram Public Data | Valid Facebook user account linked to an Instagram account (either Business or Creator profile) with a "Manage Page" user role level. | Manage roles on a shared Instagram account |
| Klaviyo | Valid Klaviyo account with an "Admin", or "Owner" or "Manager" user role level. An API Key must be created. | |
| LinkedIn Ads | Valid LinkedIn user account with at least "Viewer" access to an ad account. "Admin-level page access" is required for creative level granularity (content and metadata of the ads). Please find more information from this guide. | |
| LinkedIn Company Pages | Valid LinkedIn user account with "Super Admin" or "Content Admin" access. | Adding admin access to LinkedIn Pages |
| Mailchimp | Valid Mailchimp user account with "Admin" or "Owner" level. | Granting access to Mailchimp accounts |
| Microsoft Advertising | Valid Microsoft user account with at least "Advertiser Campaign Manager" access to an ad account. Multi-factor authentication must be enabled for the Microsoft user account. | Granting access to Microsoft Advertising account Microsoft account security info & verification codes |
| Netvisor | To enable Supermetrics for Netvisor, you must go to the Netvisor Store and enable the connection there. No specific user role level is required for this data source. | |
| Outbrain Amplify | Account must be allowlisted by Outbrain directly to gain API access. | |
| Optimizely | Valid user account with at least "Administrator" or "Pro" access to an ad account. | Granting access to Optimizely account |
| Pinterest Ads | Valid Pinterest user account with at least "Admin" or "Campaign" access to an ad account. | Valid Pinterest user account with at least "Admin" or "campaign" access to an ad account. |
| Pinterest Organic | The user must be logged in as the "owner" of the profile (advertising account access is not enough). The profile queried must be a business profile. | Authenticating Pinterest Organic |
| Salesforce | User must have API access enabled on their user profile in Salesforce and have rights to the objects, fields, and data they want to fetch. As the platform's permissions are high customizable and will vary from instance to instance, you must contact your Salesforce system administrator for help enabling all the pieces. | Troubleshooting Permissions Issues with Salesforce |
| Salesforce Marketing Cloud | Requires a Salesforce Marketing Cloud account, which is either Pro, Corporate, or Enterprise edition.
| Authenticating Salesforce Marketing Cloud |
| Searchmetrics | User must need an API Key and an API Secret. A valid "administrator" user role. | |
| Semrush Analytics | A Semrush subscription and an API key are required.
| Subscription and API key SemRush API units |
| Semrush Projects | A Semrush subscription and an API key are required.
| Subscription and API key Semrush API units |
| Snapchat Marketing | A valid Snapchat user account with at least "Account Admin" or "Campaign Manager" access to an ad account. | Roles and permissions |
| Snowflake | For an oAuth connection, you must need a valid ACCOUNTADMIN and create a Client ID and Client Secret. In addition, you need hostname, warehouse name, database name and database schema to establish the connection. For a database connection, you must need a username, password, hostname, warehouse name, database name and database schema. | |
| Shopify | A valid Shopify store account with at least an "Owner" or "Full" level of permissions. | Staff permissions |
| StackAdapt | An API Key is required. The key can be created by your StackAdapt Account Manager. | |
| Stripe | An Administrator user role level is required. | |
| Taboola | A valid Taboola user account with at least "Account Manager" access. | Account Administration |
| The Trade Desk | A Trade Desk API access must be enabled, which can be requested through The Trade Desk account manager. "Partner-level" reporting access is required. | |
| TikTok Ads | "Ad account Analyst" user role level is required. | Manage permissions on TikTok Business Center |
| Twitter Ads | Valid Twitter user account with at least "Campaign analyst" access to an ad account. | Details for granting ad account access Note that some dimensions may require "Ad Manager" or higher access to see. |
| Twitter Premium | Valid Twitter user account | Multi-account access not possible. Must have access to each account separately, and authenticate each separately |
| Yahoo Native Ads | A valid Yahoo Native Ads account with at least an "Admin" or "Campaign Manager" access. | Account permissions |
| Yahoo DSP | Valid API access from Yahoo is required. | |
| Yandex Direct | A valid Yandex Direct account with at least a "Chief Representative" or "Representative" user role. | |
| Yandex Metrica | A valid Yandex Metrica account with a tag installed. A valid "Chief Representative" or "Representative" user role. | |
| YouTube | For brand accounts, you must have a "Content Manager" access level. For other accounts/channels, it is required to be the "Owner" of the channel. Please refer to this Google documentation to see whether your Youtube account is a standard or a brand account. |