---
title: "BCE User Roles and Permissions"
slug: "bce-user-roles-and-permissions"
updated: 2026-07-24T16:29:48Z
published: 2026-07-24T16:29:48Z
canonical: "help.csgi.com/bce-user-roles-and-permissions"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.csgi.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# BCE User Roles and Permissions

Batch Communications Engine (BCE) uses a role-based security model to control access to application features and operational functions. Security roles define the actions users can perform and the information they can access within BCE.

The BCE role model provides clear separation of responsibilities across communication design, administration, execution, and viewing activities, enabling secure and efficient management of batch communications. The BCE role model comprises of:

- **Admin**
- **Configurer**
- **Importer**
- **Exporter**
- **Viewer**

By default, any new user is provisioned as a **Viewer**. Changes to a user’s role assignments must be requested through the **Channel Operations team** or the **BCE development team**; end users cannot self-manage roles.

### Cumulative Role Privileges

BCE role permissions are **cumulative**. If a user is assigned more than one role, their effective permissions are the **union of all privileges** granted by each assigned role. For example, a user with both **Importer** and **Exporter** roles will be able to perform both profile import and export actions in addition to their baseline Viewer access.

### Role Definitions

**Admin**

- Full administrative access across the BCE application.
- Authorized to perform **all** configuration, operational, and data actions without restriction.
- Only users with Admin access can edit individual profile records.

**Configurer**

- Authorized to **edit and delete** the following configuration objects:
  - Campaigns
  - Segments
  - Subscriptions
- **N****ot** permitted to edit profile records.

**Importer**

- Authorized to **import profile data** into BCE (for example, via supported profile import workflows).
- Intended for operational users responsible for loading or refreshing customer data.

**Exporter**

- Authorized to **export profile data** from BCE.
- Intended for tightly controlled scenarios where profile data extraction is required (e.g., analytics, external processing).

**Viewer**

- **Read-only** role.
- May log in and **view** campaigns, segments, subscriptions, and profiles, but cannot create, edit, delete, import, or export any BCE data.

This expanded role model strengthens security, supports the principle of least privilege, and provides clearer separation of duties across administrative, operational, and analytical functions within BCE.

The **User Profile Card** displays all roles assigned to the logged-in user. Depending on the user's permissions, the card can show **one or multiple role badges**, providing a quick view of the user's access levels within the application.

![](https://cdn.document360.io/c578bb14-e570-4b6e-93ed-f6c5b8a2d8a1/Images/Documentation/image-1784566622031.png?sv=2026-02-06&spr=https&st=2026-10-26T12%3A27%3A44Z&se=2026-10-26T13%3A27%3A44Z&sr=c&sp=r&sig=gOM5u2Qm3%2F2NlscEyuLOFlU1woEvOyKEpITrzon0JgE%3D)

**For example**, a user assigned both **Administrator** and **Configurer** roles will see both role labels displayed on the profile card.