1. Can MCC user in CRM be set as anything other than System Admin?
  2. Is it possible to tailor the MCC user permissions to restrict Marketing Cloud from accessing specific Objects and/or fields?

e.g.1 we want to give Marketing Cloud access to Accounts but not to Leads

e.g.2 we want to give Marketing Cloud access to a custom object but read only

e.g.2 we want to give Marketing Cloud access to a custom object with read only permission on 3 fields and write to 5 fields


There is no official guidance on this, so this list comes with no guarantees. However it is the closest I got to enabling MCC without forcing an admin role on connector user in SC. You will need:

  • Access activities
  • Allow view knowledge
  • Mass email
  • Send email
  • Author Apex
  • Run Flow
  • Manage Flow
  • View Setup and Configuration
  • View All Data
  • Modify Metadata through Metadata API Functions
  • Customize Application
  • Manage Territories
  • Manage Custom Preferences

So far, according to my testing I can use these permissions with a Standard System Users and get Journeys Activated.

Above permissions are in addition to standard MCC permissions: ConnectedApp, Marketing Cloud for AppExchange User/Admin

  • Thanks Lukas, this is great. When you say no guarantees, did you notice any unstable behavior e.g. the connector dropping etc.? Feb 6 '20 at 13:05
  • 1
    @SDE_Moustache No issues spotted so far. But that doesn’t mean I have covered all the potential cases. Feb 6 '20 at 13:10
  • 1
    hi team, have you noticed anything popping up in the past year that would need to be added to the above list? Feb 24 at 13:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.