Block field update by role

[Grégoire_Miche2]

With the event of the GDPR, we need to better control who can change which data in Marketo.

The issue is that the "block field update" functionality if far too limited, being an on-off toggle. We would need to be able to precisely define which user can update sensitive fields such as preferences or unsubscribe, as well as which user can activate or run a campaign that includes a data value change on these fields. And we also need to be able prevent update of these fields by unauthorized users through import. Similarly, we should be able to block update for some API users and not for others.

So, at the end of the day, "block field update" should be enhanced so that selective rights can be assigned to user roles. This applies for the following update sources:

• List Import trusted source
• List Import untrusted source
• Flow change data value
• Person detail update
• Web service API
• Web service API - Import to list

-Greg

[Annmarie_Doran_]

What is the difference between  Web Service API and Web Service - Import to list?  Is it as simple as Web service API is an individual record  in the database and web service API goes to a list into Marketo? I need to understand the difference to figure out which to block based on our API connections.

Thanks.

Annmarie Hummer

[Ryan_Hagg]

Blocking field updates was released in November 2008. That is nearly nine years ago. Please enhance it to be role-based.

[Ryan_Hagg]

I believe that the specific post endpoint "/rest/v1/lists/{listId}/leads.json" is being called out independent of the other API endpoints because it can actually really mess up your leads if you're not careful

[Casey_Grimes]

If we can't get blocking field updates by role, could we please get restrict trusted uploads to certain roles?

[Grégoire_Miche2]

Courtney,

I think that's available, since trusted import is a right that can be set. Unless you are talking about  something else ?

-Greg

[Casey_Grimes]

Hi Greg,

If Trusted Import is a role permission that can be set, that's news to me--I thought it was only List Import/Advanced List Import, not restricting Trusted/Untrusted.

[Grégoire_Miche2]

Hi Courtney,

you are right, I got too enthousiastic on this one

-Greg