Skip to main content

Access control filters

Restrict what specific admins can see by filtering users by tags, campaigns, and more.

Updated this week

Overview

Access control allows you to limit an admin’s visibility to specific users.

For example, you can restrict an admin to:

  • Only users in a specific campaign

  • Only users with a certain tag

  • A combination of both


Important: You must be an Account Owner to configure access control.


How to set up access control

  1. Go to the All Users tab

  2. Select the admin whose access you want to limit

  3. Click on Full profile

  4. Navigate to Access & Tags

  5. Scroll down to Access control filters

To configure filters:

  1. In Filter by fields, select the variable you want to filter by (e.g., Campaign, Tags)

  2. In Filter by field values, choose the specific value

  3. Add additional field values if needed (e.g., multiple campaigns)

  4. Click Apply filter

The next time this admin logs in, they’ll only see users who are included in the CR campaign.


Note: If you have an HRIS integration, you can also use imported company data in access control filters. For example, if your HRIS file includes fields such as Department, Country, or Region, you can use those to limit an admin’s access to specific departments, countries, or regions.


Select filtering logic

When using more than one filter, you can define the logic used to combine them.

There are two options:

  • Match by all (AND logic)

  • Match by any (OR logic)


Match by all (AND logic)

Use Match by all when you want stricter access control.

Example:

If you set:

  • Campaigns – CR campaign

  • Tags – High Potentials

With Match by all, the admin will only see users who:

  • Are in the CR campaign

    And

  • Have the High Potentials tag

If a user is only in the CR campaign but does not have the High Potentials tag, they will not be visible.


Match by any (OR logic)

Use Match by any when you want broader access across segments.

Example:

If you set:

  • Campaigns – CR campaign

  • Tags – High Potentials

With Match by any, the admin will see users who:

  • Are in the CR campaign

    Or

  • Have the High Potentials tag

This widens the scope of visibility.


Note: Filtering logic becomes available when at least two filter parameters are defined. Only one logic type can be active at a time, but you can change it at any time.


FAQs

When do access restrictions take effect?

Restrictions apply the next time the admin logs in.

Can I change or remove filters later?

Yes. You can update or remove access control filters at any time from the admin’s Access & Tags section.

Can I combine multiple campaigns, tags, and HRIS fields?

Yes. You can add multiple field values across campaigns, tags, and HRIS attributes, then define how they interact using filtering logic.

Did this answer your question?