SFMC Account User Audit: Check Roles and Permissions via API

Analysing your users’ role and permission settings can be troublesome to capture all these settings from within the Admin Setup interface.

There is a way to export all roles and permissions from marketing cloud and you can retrieve this information by using the SOAP API on the AccountUser object.

Below I outline a solution you can use to capture this information in Marketing Cloud and save to Data Extensions for easy use. We will be using WSProxy and SSJS in a script activity. Before we begin, the setup needs to be built in the Enterprise / Parent / Top level business unit.

Data Extension Setup

USERS_INFORMATION Data Extension

USERS_ROLES Data Extension

USERS_PERMISSIONS Data Extension

Automation SSJS Activity

SSJS Code

With all this in place it’s time to execute the script and run the automation!

After the automation completes, review your DEs to analyse the output!

I welcome your feedback :)