Groups
Groups are a way to organise administrators and API keys and assign different permission levels to control what actions they can perform in the system. Properly configured groups help maintain security and workflow efficiency by ensuring administrators and API keys have access only to the features they need.
Understanding default groups
Each account comes with four default groups that you can modify or delete as needed:
| Group name | Permission level | Description |
|---|---|---|
| mambo-administrators | System Administrator | Full access to all system functions including critical settings |
| mambo-managers | Manager | Access to manage most resources but limited system configuration ability |
| mambo-editors | Editor | Can edit content but has restricted access to settings |
| mambo-users | User | Basic access with minimal permissions |
You must maintain at least one group with System Administrator permissions to avoid locking all administrators out of the system. Before deleting any group with administrative privileges, ensure another group has these permissions.
Managing groups
You can create custom groups when you need more granular permission control than the default groups provide. For example, you might create:
- A marketing group with access only to campaigns and analytics
- A support group with user management permissions but no system configuration access
- A content group focused on rewards and missions management
To create or modify a group, navigate to Account → Groups. From a group's detail page you can edit its name, members, and permissions.
Group permissions
Group permissions define what actions a group's members can perform across all sites. They apply globally and take priority over site-specific permissions on individual administrators (which can be set on the administrators page).
Editing group permissions requires either System Administrator or Administrator rights.
Permission types
System administrator
Ability to perform all administration functions. There must be at least one group with at least one administrator with this permission.
Default groups with this permission: mambo-administrators.
Administrator
Ability to perform Administrator and Group management as well as Site management functions:
- Administrator and Group: creating, updating and deleting; managing administrator-group membership and site-specific permissions.
- Site: creating, updating, deleting and cloning; managing the JavaScript API security settings.
Default groups with this permission: mambo-administrators.
Manager
Ability to perform Activity, User and Notification functions:
- Activity: creating, rejecting; managing bounties.
- Notification: clearing notifications.
- User: creating, updating, deleting, resetting and blacklisting.
Default groups with this permission: mambo-managers.
Editor
Ability to perform all game-mechanic management functions: creating, updating and deleting all of the game mechanics.
Default groups with this permission: mambo-editors.
User
Ability to view information. Any new administrator created automatically joins these groups, unless those groups have System Administrator or Administrator permissions.
Default groups with this permission: mambo-users.
Assigning permissions to a group
To assign permissions:
- Open the group's detail page from Account → Groups.
- Add or remove permission types from the group's permission list.
- Save your changes.