Block field update by role

Block field update by role

With the event of the GDPR, we need to better control who can change which data in Marketo.

The issue is that the "block field update" functionality if far too limited, being an on-off toggle. We would need to be able to precisely define which user can update sensitive fields such as preferences or unsubscribe, as well as which user can activate or run a campaign that includes a data value change on these fields. And we also need to be able prevent update of these fields by unauthorized users through import. Similarly, we should be able to block update for some API users and not for others.

So, at the end of the day, "block field update" should be enhanced so that selective rights can be assigned to user roles. This applies for the following update sources:

  • List Import trusted source
  • List Import untrusted source
  • Flow change data value
  • Person detail update
  • Web service API
  • Web service API - Import to list

-Greg

8 Comments
Annmarie_Doran_
Level 2

What is the difference between  Web Service API and Web Service - Import to list?  Is it as simple as Web service API is an individual record  in the database and web service API goes to a list into Marketo? I need to understand the difference to figure out which to block based on our API connections.

Thanks.

Annmarie Hummer

Ryan_Hagg
Level 1

Blocking field updates was released in November 2008. That is nearly nine years ago. Please enhance it to be role-based.

Ryan_Hagg
Level 1

I believe that the specific post endpoint "/rest/v1/lists/{listId}/leads.json" is being called out independent of the other API endpoints because it can actually really mess up your leads if you're not careful

Casey_Grimes
Level 10

If we can't get blocking field updates by role, could we please get restrict trusted uploads to certain roles?

Grégoire_Miche2
Level 10

Courtney,

I think that's available, since trusted import is a right that can be set. Unless you are talking about  something else ?

-Greg

Casey_Grimes
Level 10

Hi Greg,

If Trusted Import is a role permission that can be set, that's news to me--I thought it was only List Import/Advanced List Import, not restricting Trusted/Untrusted.

Grégoire_Miche2
Level 10

Hi Courtney,

you are right, I got too enthousiastic on this one

-Greg

kh-lschutte
Community Manager
Status changed to: Open Ideas