How to restrict user access to only their data?
PostTrack uses a role system with three data visibility levels.
Visibility Levels
1. Own Data (for buyers)
User sees only:
- Their campaigns and statistics
- Tasks where they are executor
- Creatives they have access to
- Their salary in billing
When to use:
- For regular buyers
- For contractors
- For interns
2. Team Data (for team leads)
User sees:
- Statistics of entire team
- Tasks of all team members
- Subordinate data
When to use:
- For team leads
- For team managers
3. All Data (for owners)
User sees:
- All statistics across all projects
- All tasks of all users
- Salaries of all employees
When to use:
- For company owners
- For top managers
- For accountants
How to Set Up Restricted Access
Step 1: Create "Buyer" Role
- Open Team → Roles
- Click "Create Role"
- Specify name: "Buyer"
- Select visibility level: "Own Data"
- Configure module access permissions:
- Dashboard: view
- Statistics: view (own data only)
- Expenses: edit
- Creatives: full access
- Tasks: edit
- Other: no access
- Save role
Step 2: Create User
- Open Team → Users
- Click "Add User"
- Fill in details (name, email)
- Select role: "Buyer"
- Save user
Step 3: Link to Keitaro Campaign
For automatic data filtering:
- Open user profile
- Go to "Source Linking" section
- Select integration: Keitaro
- Specify linking level:
- Campaign - only one campaign
- Campaign Group - multiple campaigns
- Sub (flow) - specific flows
- Save settings
Result:
- User automatically sees only their campaign data
- Filtering happens at system level
- No need to manually restrict access
Team Setup Example
Buyer Team
Owner (all data)
└── Team Lead (team data)
├── Buyer 1 (own data) → Campaign_1
├── Buyer 2 (own data) → Campaign_2
└── Buyer 3 (own data) → Campaign_3
Setup:
- Owner sees everything
- Team Lead sees data of their 3 buyers
- Each buyer sees only their campaign
Important
- Security - user physically cannot see others' data
- Automation - Keitaro linking filters data automatically
- Flexibility - can create any role with any permissions
- Hierarchy - assign parents to create team structure
More details: