Issue
Some users are unable to create campaigns from the Activations tab even though they have the AmpIQ user role assigned.
Example symptoms:
“Create Campaign” button is missing
Users can view campaigns but cannot create or run them
Root Cause
The affected users have the RESTRICT DATA EXPORTS policy applied.
This policy overrides AmpIQ permissions and blocks:
Creating campaigns
Editing campaigns
Running campaigns
Running orchestrations
Even if the AmpIQ role is assigned, this policy will still prevent campaign access.
Important Clarification (PII Safety)
Removing RESTRICT DATA EXPORTS:
✅ Allows users to create, edit, and run campaigns
❌ Does not allow users to download or view PII
PII access is controlled separately using:
Restrict PII Access
Restrict Download Access
As long as those policies remain in place, PII is still protected.
Resolution
To allow campaign creation:
Go to Settings → Users
Select the affected user
Remove the RESTRICT DATA EXPORTS policy
Save changes
The user will now be able to create campaigns if they have the AmpIQ role.
When to Use RESTRICT DATA EXPORTS
Keep this policy enabled if:
The user should not run campaigns or orchestrations
The user only needs read-only access
Remove it if:
The user is expected to actively create or manage campaigns
Summary
AmpIQ role alone is not enough
RESTRICT DATA EXPORTS blocks campaigns
Removing it does not expose PII
Always check user policies when permissions look incorrect