/ /

ABAC: Using Access Control Groups (ACGs) in Newsletter & Survey Features

Updated 5 months ago

What’s covered in this article

  • How ACGs restrict who can manage and who can receive a newsletter or survey
  • How to select sub-audiences within your permitted audience
  • How permissions and visibility change depending on user roles (manager, admin, app manager, etc.)

ACG enforcement in feature workflows

When a user is assigned to an Access Control Group (ACG) for a feature like Newsletter or Survey, their ability to manage and send is tightly scoped to the target audience defined in their ACG.

Let’s walk through a Survey manager example:

Scenario: Amber Rich is assigned as a survey manager

  • She’s scoped via an ACG to the Manufacturing segment.
  • When she logs into the Surveys feature, she:
    • Only sees surveys targeted to Manufacturing
    • Can only create surveys for Manufacturing
    • Cannot create or view surveys for any other audience

Step-by-step: Creating a Survey or Newsletter with ACG restrictions

  1. Log in as a scoped manager.
  2. Navigate to Surveys or Newsletters.
  3. Click Create new.
  4. Select a Target audience.
    • You will only see audiences allowed by your ACG.
    • You can:
      • Use the full target audience (e.g., entire Manufacturing segment)
      • Create a sub-audience (e.g., “Sales team in Manufacturing” or “Manufacturing employees in the U.S.”)
  5. Complete the setup (questions, template, settings).
  6. Preview your audience list to confirm scope.
  7. Save and send.

Note:

Sub-audiences offer granular control and help avoid audience sprawl, all while respecting the original scope of the ACG.

What changes for app managers or global roles?

When logging in as an app manager or feature owner with global access:

  • You can view and manage all ACGs across the org.
  • You’ll see all created newsletters or surveys, regardless of audience.
  • When creating a new item:
    • You’ll see a toggle for “All org” access.
    • You can target any audience, including system-wide ones.

The “All org” toggle only appears for users whose ACG includes All org in its audience scope.

Visibility differences

RoleWhat they see
Manager (e.g., Amber)Only surveys/newsletters scoped to their ACG audience
Admin (ACG admin)Same as manager, plus ability to modify ACG members/audience
App manager/Feature ownerAll content, all audiences, access to ACG setup, “All org” toggle

Key takeaways

  • Audience scoping is enforced at every step of the survey/newsletter creation flow
  • Users can narrow their target (sub-audiences) but not expand beyond their ACG
  • Visibility, analytics, and recipient lists are scoped to the selected audience
  • “All org” access is only available to users whose ACG explicitly includes it
Was this article helpful?
Subscribe to receive updates on this article