# Access and permissions: who sees and does what?

Source: https://help.cyreen.de/en/cap-explorer/benutzer-und-zugang/zugriff-und-rechte/ | Language: en | Reviewed: 2026-10-16

What you can see and do in CAP Explorer depends on three things. The pages in the Help Center show below the title which permission you need for a task.

Account type retailer, brand, agency or Cyreen
→
Level in the company head office, region or store: which stores you see
→
Role permissions to view and manage per area

## Account type

| Account type | What you see |
|---|---|
| **Retailer** | Campaigns, visuals and reports of your company, limited to the stores of your level |
| **Brand** | Only the campaigns shared with you, and within them the released part. You log in through [Brand Access](https://help.cyreen.de/en/cap-explorer/erste-schritte/anmelden.md). |
| **Agency** | Today, agencies work with the user type **Cyreen User**. A separate account type follows once it is released, see [What is changing](#what-is-changing). |
| **Cyreen** | All companies and stores |

Retailers create brand users themselves, see [Manage brand users](https://help.cyreen.de/en/cap-explorer/benutzer-und-zugang/brand-benutzer-verwalten.md).

## Level in the company: which stores you see

A retailer account is built like the company. Every user belongs to one of these levels:

| Level | Sees |
|---|---|
| **Head office** | all stores of the company |
| **Region** | the stores of its region |
| **Store** | only its own store |

Lists and dashboards only show campaigns, visuals and figures from these stores. The Performance dashboard of a campaign is only visible to the company that owns the campaign, to Cyreen and to brands it has been shared with.

## Role: what you are allowed to do

Every user has one or more roles. A role bundles permissions, with two levels per area:

- **View:** you can look at the area.
- **Manage:** you can also create and edit there. There is no separate permission for creating.

A role can, for example, create loop-based campaigns but only view contact-based ones.

The permissions in the **Permission Details** are named like the menu entries, for example **Loop-based Campaigns** or **User List**. The **Roles** page shows which roles exist in your account, see [Manage user roles](https://help.cyreen.de/en/cap-explorer/benutzer-und-zugang/benutzerrollen.md).

## Entries of other companies

You only edit and share entries of your own company. If a visual of another company plays in your stores, you see it in the list, but **Edit** and **Clone** show **Not Available**. Only Cyreen can edit and share entries of other companies.

If an area is switched off for your company, for example the Listing Check or **Data Exchange**, it is missing from the menu even if your role has the permission. If you lack a permission, you see **No permission** or **No access**. In that case, contact the administrator of your account.

## What is changing

Cyreen is extending access. New with the upcoming CAP Explorer release:

- **Tenants:** a tenant groups several retailers. If you have access to several, you choose one when you [log in](https://help.cyreen.de/en/cap-explorer/erste-schritte/anmelden.md).
- **Retailer filter:** users with several retailers filter by one retailer at the bottom left or see all of them together, see [The interface](https://help.cyreen.de/en/cap-explorer/erste-schritte/oberflaeche.md).
- **Agencies:** agencies get their own account type once it is released and, depending on their release, see only their own data or also data of the tenant and the retailers.
- **Retailer users:** for them everything stays as described above.