Introducing Simplified RBAC Permissions for E-Comms

Hi Moveworks Admins,

We’re rolling out an enhanced Role-Based Access Control (RBAC) model for E-Comms for our US, EU, AU and CA customers. This update introduces a more granular role structure that clearly separates access, publishing and user management, making E-Comms permissions simpler to manage and more scalable as usage grows. Support for GovCloud is coming soon.

Previous E-Comms Permission Model

Previously, E-Comms used two roles, along with a separate publishing control:

Employee Communications Admin

• Full access to E-Comms
• Can view, edit and delete campaigns
• Can manage user access (add/remove users, update roles)

Employee Communications User

• Can access E-Comms
• Can view and edit campaigns

How Publishing Worked Previously

Publishing was controlled by an additional setting called Access control: Publish Campaign (found under Setup → Chat Platforms → Notification Settings → Additional Controls).

A user could publish a campaign only when both of the following conditions are met:

1. The user had either the Admin or User role and
2. The Access control: Publish Campaign enabled rule defined in the DSL Editor allows them to publish, which could be configured in one of the following ways:
   • Specific users: The DSL contains a list of email addresses; only those users can publish.
   • Enabled (TRUE): All users with E-Comms roles can publish campaigns.
   • Disabled (FALSE): Publishing is disabled for everyone.

     

      

Updated E-Comms Role Model

E-Comms now uses a simplified, three-role RBAC model that clearly separates responsibilities:

Admin

• Full access to E-Comms

• Access campaigns (view, edit, and delete)

• Publish campaigns

• Manage user access (add/remove users, update roles)

Publisher

• Access campaigns (view, edit and delete)

• Publish campaigns

User

• Access campaigns (view and edit)

With this update, publishing is determined entirely by roles. The separate publish configuration will no longer be used. You can find the new Publisher role alongside existing E-Comms roles under Roles and Permissions when assigning or modifying roles for a user.

Migration Plan

Existing permissions have been automatically aligned to the new RBAC model. No action is required from your end.

Below is how previous configurations were mapped to new RBAC roles:

• Previously: Admin → Now: Admin
• Previously: Admin with publishing enabled → Now: Admin
• Previously: User → Now: User
• Previously: User with publishing enabled → Now: Publisher

This migration is additive only. Existing roles remain unchanged and no roles have been removed.

What You Can Expect After the Update

• Clearer role separation: Publishing and user-access management are explicitly defined.
• Predictable publishing access: Only Admins and Publishers can publish campaigns.
• No disruption: Existing access and behavior have been preserved.

Thank you,
The Moveworks Setup Team