Add User Access to Criteo | Blue Frog Docs

Add User Access to Criteo

Step-by-step guide to inviting new users and granting access to your Criteo Management Center account.

This guide walks through the process of adding new users to your Criteo account, assigning appropriate roles, and configuring permissions.

Prerequisites

Before adding users:

  • Administrator access to Criteo Management Center
  • User's email address (must be a valid business email)
  • Defined role for the new user
  • Advertiser accounts identified for multi-account access
  • Security policies reviewed (MFA requirements, etc.)

Adding a Single User

Step 1: Navigate to User Management

  1. Log in to Criteo Management Center
  2. Click your profile icon in the top-right corner
  3. Select Organization Settings
  4. Click Users & Permissions in the left sidebar

Step 2: Invite New User

  1. Click the + Add User button
  2. Enter user information:
    • Email address: User's business email
    • First name: User's first name
    • Last name: User's last name
  3. Click Next

Important:

  • Email must not already be associated with the organization
  • Use business email addresses (avoid personal emails)
  • Verify email spelling before proceeding

Step 3: Select User Role

Choose the appropriate role based on responsibilities:

Administrator

✓ Select if user needs:
  - Full account control
  - User management capabilities
  - Billing access
  - API credential management

Campaign Manager

✓ Select if user needs:
  - Campaign creation and editing
  - Daily campaign management
  - Performance optimization
✗ No budget or billing access

Analyst

✓ Select if user needs:
  - Reporting and analytics access
  - Data export capabilities
  - Performance monitoring
✗ No editing capabilities

Creative Manager

✓ Select if user needs:
  - Creative asset management
  - Ad template editing
  - Creative performance tracking
✗ No campaign or budget access

API User

✓ Select if user needs:
  - Programmatic API access
  - Automated reporting
  - System integrations
✗ Limited or no web interface access

Step 4: Assign Advertiser Access

For organizations with multiple advertisers:

  1. Select advertisers the user should access
  2. For each advertiser, confirm the role:
    • Same role across all advertisers, OR
    • Different roles per advertiser

Example:

Advertiser A: Administrator
Advertiser B: Campaign Manager
Advertiser C: Analyst
  1. Click Assign

Step 5: Configure Additional Settings (Optional)

Access Restrictions:

  • IP Whitelist: Restrict to specific IP addresses
  • Time-based access: Set access duration (temporary contractors)
  • Custom permissions: Modify specific permissions if needed

Notification Settings:

  • Email notifications for campaign alerts
  • Performance reports
  • Budget alerts

Step 6: Review and Send Invitation

  1. Review user details:
    • Email address
    • Role assignment
    • Advertiser access
    • Additional settings
  2. Click Send Invitation

Step 7: Confirmation

You'll see a confirmation message:

✓ Invitation sent to user@example.com
  The user will receive an email to complete setup.

What happens next:

  • User receives invitation email
  • Email contains setup link (valid for 7 days)
  • User creates password and completes profile
  • Access is granted upon completion

Adding Multiple Users

Bulk User Upload

For adding many users at once:

Step 1: Download Template

  1. Navigate to Users & Permissions
  2. Click Bulk Actions > Add Users
  3. Download the CSV template

Template Format:

email,first_name,last_name,role,advertiser_id_1,advertiser_id_2
john.doe@example.com,John,Doe,Campaign Manager,12345,67890
jane.smith@example.com,Jane,Smith,Analyst,12345,
bob.johnson@example.com,Bob,Johnson,Administrator,12345,67890

Step 2: Fill Template

Required Fields:

  • email - User's email address
  • first_name - First name
  • last_name - Last name
  • role - One of: Administrator, Campaign Manager, Analyst, Creative Manager, API User

Optional Fields:

  • advertiser_id_1, advertiser_id_2, etc. - Advertiser IDs for access

Example:

email,first_name,last_name,role,advertiser_id_1
marketing.manager@company.com,Sarah,Wilson,Campaign Manager,12345
data.analyst@company.com,Mike,Chen,Analyst,12345
creative.lead@company.com,Emma,Taylor,Creative Manager,12345

Step 3: Upload File

  1. Click Bulk Actions > Add Users
  2. Click Upload CSV
  3. Select your completed CSV file
  4. Click Upload

Step 4: Review and Confirm

  1. System validates the file
  2. Preview shows:
    • ✓ Valid entries (will be added)
    • ✗ Invalid entries (with error descriptions)
  3. Fix any errors and re-upload if needed
  4. Click Confirm and Send Invitations

Step 5: Monitor Progress

  1. Progress bar shows invitation sending status
  2. Summary displays:
    • Successfully sent invitations
    • Failed invitations (with reasons)
  3. Download error report if needed

Invitation Email

What Users Receive

Users receive an email with:

Subject: "You've been invited to Criteo Management Center"

Content:

Hello [First Name],

You've been invited to join [Organization Name] on Criteo Management Center.

Role: [Assigned Role]
Invited by: [Your Name]

To accept this invitation:
1. Click the link below
2. Create your password
3. Complete your profile

[Accept Invitation Button]

This invitation expires in 7 days.

Questions? Contact [Your Email]

Invitation Expiration

  • Invitations expire after 7 days
  • Users can request a new invitation
  • Admins can resend expired invitations

Setting Up Multi-Factor Authentication

Require MFA for New Users

When adding users:

  1. During invitation setup
  2. Check Require MFA option
  3. User must enable MFA during first login

MFA Setup Process for Users:

  1. User accepts invitation
  2. Creates password
  3. Prompted to set up MFA
  4. Downloads authenticator app (if needed)
  5. Scans QR code
  6. Enters verification code
  7. Receives backup codes

Recommended Authenticator Apps:

  • Google Authenticator
  • Microsoft Authenticator
  • Authy
  • 1Password

Advanced Access Configuration

Custom Permissions

Create custom permission sets:

  1. Select Campaign Manager or Analyst base role
  2. Click Customize Permissions
  3. Toggle specific permissions:

Campaign Permissions:

✓ View campaigns
✓ Edit campaign names
✓ Pause/resume campaigns
✗ Delete campaigns
✗ Edit budgets
✗ Change bid strategies

Reporting Permissions:

✓ View standard reports
✓ Export data
✓ Create custom reports
✗ Schedule automated reports

Creative Permissions:

✓ View creatives
✓ Upload new creatives
✗ Delete creatives
✗ Approve creatives
  1. Save custom permission set
  2. Apply to user

Time-Limited Access

For contractors or temporary team members:

  1. During user invitation
  2. Enable Time-Limited Access
  3. Set:
    • Start date: When access begins
    • End date: When access automatically expires
  4. Optional: Enable Auto-notify before expiration

Example:

Contractor: Q4 Campaign Support
Start: October 1, 2024
End: December 31, 2024
Notify: 7 days before expiration

Geographic Restrictions

Limit access based on location (Enterprise feature):

  1. Enable Geographic Restrictions
  2. Select allowed countries/regions:
    ✓ United States
✓ Canada
✓ United Kingdom
✗ All others
  3. User cannot access from other locations

Agency-Specific Setup

Agency User Roles

For agency partners:

Agency Administrator

  • Manages all client accounts under agency
  • Can add agency team members
  • Full access to assigned clients

Agency Campaign Manager

  • Manages campaigns for specific clients
  • Cannot add users
  • Client-level access only

Agency Reporting

  • Cross-client reporting access
  • Export data for all clients
  • No editing capabilities

Adding Agency Users

  1. Navigate to Agency Settings
  2. Click Add Agency User
  3. Assign client accounts:
    Client A: Administrator
Client B: Campaign Manager
Client C: Campaign Manager
Client D: Analyst
  4. Set agency-level permissions
  5. Send invitation

Verification and Testing

Verify User Access

After user accepts invitation:

  1. Navigate to Users & Permissions
  2. Confirm user status:
    • ✓ Active - Successfully set up
    • ⏳ Pending - Invitation not yet accepted
    • ✗ Inactive - Disabled account

Test User Permissions

Recommended Testing:

  1. Ask user to log in
  2. Verify they can access assigned advertisers
  3. Test permissions:
    • Can they create campaigns? (if Campaign Manager)
    • Can they view reports? (all roles)
    • Can they access billing? (Admin only)
  4. Confirm MFA is working (if required)

Troubleshooting Setup Issues

User didn't receive invitation:

  • Check spam/junk folder
  • Verify email address is correct
  • Resend invitation

User can't complete setup:

  • Check invitation hasn't expired
  • Verify email link is not broken
  • Resend fresh invitation

User has wrong permissions:

  • Review role assignment
  • Check advertiser access
  • Verify custom permissions

Best Practices

1. Start with Minimal Access

Grant minimum required permissions initially:

✓ Start: Analyst or Campaign Manager
✗ Avoid: Immediate Administrator access

2. Document User Additions

Maintain a log:

## User Access Log

### 2024-10-15: Added John Doe
- Email: john.doe@company.com
- Role: Campaign Manager
- Advertisers: Account 12345
- Reason: New marketing hire
- Added by: admin@company.com

3. Schedule Follow-up

After adding users:

  • Day 1: Confirm invitation received
  • Week 1: Check user has logged in successfully
  • Month 1: Review access level appropriateness
  • Quarter 1: Formal access review

4. Security Checklist

Before granting access:

  • Verified user identity
  • Confirmed business need
  • Appropriate role selected
  • MFA requirement set
  • Access expiration date (if temporary)
  • Documented in access log
  • Manager approval obtained (if required)

5. Onboarding Resources

Provide new users with:

  • Criteo Management Center overview
  • Role-specific documentation
  • Training materials
  • Support contact information
  • Team policies and procedures

Resending Invitations

For Expired Invitations

  1. Navigate to Users & Permissions
  2. Find user with Pending status
  3. Click ⋯ (more options)
  4. Select Resend Invitation
  5. Confirm action

For Undelivered Emails

  1. Verify email address is correct
  2. Update if needed
  3. Resend invitation
  4. Ask user to check spam folder

Bulk Invitation Management

View Pending Invitations

  1. Users & Permissions > Filter by Status
  2. Select Pending
  3. Review list of unaccepted invitations

Cancel Pending Invitations

To cancel invitations:

  1. Select pending user(s)
  2. Click Bulk Actions > Cancel Invitations
  3. Confirm cancellation

Resend Multiple Invitations

  1. Select multiple pending users
  2. Click Bulk Actions > Resend Invitations
  3. Confirm action
  4. Users receive new invitation emails

Getting Help

Common Questions

Q: How many users can I add? A: No limit for most accounts. Enterprise accounts may have negotiated limits.

Q: Can external partners access the account? A: Yes, any valid email address can be invited. Use appropriate role restrictions.

Q: How long does setup take? A: Invitation is instant. User setup takes 5-10 minutes after accepting.

Q: Can I add users without admin access? A: No, only Administrators can add or manage users.

Support Resources

  • Criteo Help Center: https://help.criteo.com/user-management
  • Video Tutorials: Available in Management Center
  • Support Ticket: Submit via Management Center
  • Account Manager: Contact for enterprise support

Next Steps

↑ Back to top
// SYS.FOOTER