General Data Source Access Requirements

We've compiled below, to the best of our knowledge, what rights and permissions are required for most data sources. This list is not exhaustive but will be updated over time to include all sources we support.


Data SourceAccess Requirements for User AccountOther Notes/References
AdformRequires user to have "External API" access enabled. They will also need sufficient access to specific clients to be able to read their data.

A valid "Advertiser" or "Agency" user role, as part of Buyer Solution category.
Enabling External API
Adobe AnalyticsValid Adobe ID linked to Experience Cloud and has "Web Service Access" enabled for the account. Also requires explicit access granted to see the report suites, reports, segments, and custom fields.

As the platform's permissions are high customizable and will vary from account to account, you must contact your Adobe system administrator for help enabling all the pieces.
AdRollValid "Administrator" or "General User" level role. 
AhrefsValid Ahrefs account with an "Admin" or "Owner" level role and at least a Lite level subscription.
Bing Webmaster ToolsRequires an API key in order to able to access and use Bing Webmaster APIs. This API key can be generated from Bing Webmaster Tools. 
CallRailRequires an API key with a valid "Admin", "Manager" or "Reporting" user role.

To generate an API Key: 

CallRail's API documentation

For user settings:

CriteoValid API user with Client ID and Client Secret.Accessing Criteo
Facebook AdsValid Facebook user account with at least an "Employee Access" with the View Performance option enabled to an ad account. Or, "Ad Account Analyst" access to an ad account.

For Lead data access, the user must either be a "Lead Manager" or a "Page Admin" to see the data. For agencies, they must be a "Page Admin".
Facebook InsightsValid Facebook user account with either "Administrator" access to a specific page, or if connected with the Business Manager at least "Page editor" access to a page.
Google AdsValid Google account with at least "Read only" access to a Google Ads account or MCC.
Google Ad ManagerValid Google account with at least "Trafficker" role for the account.

API access must be explicitly enabled by the Administrator.

Note that this platform allows for custom roles/access, so you may need to talk to your Administrator for help.
Google AdSense

A valid Google AdSense account with at least an "Admin" user role.

Manage user access to your account
Google AnalyticsValid Google account with at least "Editor" access to a Property and Views underneath.
Google BigQuery

For Dataset, you will need both "BigQuery Data Viewer" and "BigQuery User" role levels.

For Project, you will need only a "BigQuery User" role level.

Google Campaign ManagerValid Google user account with appropriate User Role set for the reporting content they need to see (variable based on what admin set for the role).

May need API access for the account enabled by Google rep or Campaign Manager support team.

Google Display & Video 360Valid Google user account with "Standard" or "Admin" user role.Managing user access
Google My Business

A valid Google account with at least an "Owner" or "Manager" user role.

Add and removing listing owners and managers

Google Search Ads 360 Valid Google user account with at least "Advertiser Manager" or "Agency Manager" user role. Add, edit or remove users in Search Ads 360
Google Search ConsoleTwo kind of owners: Verified Owner and Delegated OwnerVerify your site ownership
HubSpotValid Hubspot account with minimum "Admin Rights". For full access, the user role "Super Admin" or "Owner" is required.HubSpot permissions
Instagram InsightsValid Facebook user account linked to an Instagram account, with same permissions as Facebook Insights above for the Instagram-linked FB page.
Instagram Public DataValid Facebook user account linked to an Instagram account (either Business or Creator profile) with a "Manage Page" user role level. 

Manage roles on a shared Instagram account


LinkedIn AdsValid LinkedIn user account with at least "Viewer" access to an ad account.Granting access to LinkedIn Ads accounts
LinkedIn Company PagesValid LinkedIn user account with designated "Administrator" access.Adding admin access to LinkedIn Pages
MailchimpValid Mailchimp user account with and "Admin" or "Owner" level. Granting access to Mailchimp accounts
Microsoft AdvertisingValid Microsoft user account with at least "Advertiser Campaign Manager" access to an ad account.Granting access to Microsoft Advertising account
Netvisor

To enable Supermetrics for Netvisor, you must go to the Netvisor Store and enable the connection there.

No specific user role level is required for this data source. 

Outbrain AmplifyAccount must be whitelisted by Outbrain directly to gain API access.How to Connect with Outbrain Amplify
Optimizely 

Valid user account with at least "Administrator" or "Pro" access to an ad account. 

Granting access to Optimizely account
Pinterest Ads Valid Pinterest user account with at least "Admin" or "Campaign" access to an ad account. 

Valid Pinterest user account with at least "Admin" or "campaign" access to an ad account. 

Pinterest Organic

The user must be logged in as the "owner" of the profile (advertising account access is not enough).


The profile queried must be a business profile.

Authenticating Pinterest Organic
SalesforceUser must have API access enabled on their user profile in Salesforce and have rights to the objects, fields, and data they want to fetch.

As the platform's permissions are high customizable and will vary from instance to instance, you must contact your Salesforce system administrator for help enabling all the pieces.
Troubleshooting Permissions Issues with Salesforce
SearchmetricsUser must need an API Key and an API Secret.

A valid "administrator" user role.
How to connect with Searchmetrics
SEMRush AnalyticsA SEMRush subscription and an API key are required. 


No user role level is required.

Subscription and API key
SEMRush API units
SEMRush Projects

A SEMRush subscription and an API key are required.


No user role level is required.

Subscription and API key
SEMRush API units
Snapchat MarketingA valid Snapchat user account with at least "Account Admin" or "Campaign Manager" access to an ad account. Roles and permissions
Snowflake

For an oAuth connection, you must need a valid ACCOUNTADMIN and create a Client ID and Client Secret. In addition, you need hostname, warehouse name, database name and database schema to establish the connection.

For a database connection, you must need a username, password, hostname, warehouse name, database name and database schema.

How to create an OAuth Client 


Shopify

A valid Shopify store account with at least an "Owner" or "Full" level of permissions. 

Staff permissions
StackAdaptAn API Key is required. The key can be created by your StackAdapt Account Manager.  
StripeAn Administrator user role level is required. 

TaboolaA valid Taboola user account with at least "Account Manager" access. Account Administration
Twitter AdsValid Twitter user account with at least "Campaign analyst" access to an ad account.Details for granting ad account access

Note that some dimensions may require "Ad Manager" or higher access to see.
Verizon Media Native Ads

A valid Verizon Media Native Ads account with at least an "Admin" or "Campaign Manager" access.

Account permissions
Verizon Media DSPValid API access from Verizon is required. 

How to Connect with Verizon Media DSP

Yandex DirectA valid Yandex Direct account with at least a "Chief Representative" or "Representative" user role.

Roles and access of Yandex.Direct users

Yandex Metrica

A valid Yandex Direct account with a tag installed. 


Representatives have access to all campaigns.

Only the chief representative can register a representative.


YouTubeA valid YouTube user account with at least "Owner" or "Manager" or "Content Manager" access to an ad account. 

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.