MCP Tool Permission Map

These are the permissions that make each MCP tool visible to your agent. Aprimo's MCP Server tailors the tool list it advertises to each connected user: a Productivity Management (PM) tool appears in the agent's tools/list only when the user holds at least one of the permissions mapped to it below. This keeps the advertised tool set focused on what the user can actually work with, and reduces the context an agent has to reason over.

How to read this page

Any one is enough. The permissions listed for a tool are alternatives — holding any single one of them makes the tool visible. They are not a required set.
The System Administration right surfaces almost everything. It appears as an option on nearly every tool. The user- and group-administration tools are the exception — they require the Security Administrator right specifically (see Users, Groups & Roles).
Tools not listed here have no visibility gate. They are shown to every connected user. That includes all of the DAM tools (search_aprimo, get_record_metadata, and the rest) and many PM tools that carry no global permission requirement. Absence from this page means "always visible," not "hidden."
Permission names are the Aprimo functional rights an administrator grants to users in your tenant.

Visibility is not authorization

This map only controls whether a tool is shown to the agent — it does not grant access. Every tool call is still authorized per user by Aprimo at execution time. For many tools, holding the permission that surfaces the tool is necessary but not sufficient: the user must additionally be on the relevant access list, finance group, or record to succeed. A visible tool can still return an authorization error when the agent calls it.

Activities

Includes activity roles and the Activity-backed generic object.

Tool	Visible if the user holds any one of
`get_activity`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`list_activities`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`search_activities`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`get_associated_activities`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`create_activity`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`update_activity`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`delete_activity`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`create_activity_milestone`	`Activity, Edit`, `System Administration, Access`
`list_activity_roles`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`get_activity_role`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`create_activity_role`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`update_activity_role`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`delete_activity_role`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`add_activity_role_members`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`remove_activity_role_member`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`get_generic_object_alpha`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`list_generic_object_alpha_for_activity`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`

Activity Cells & Treatments

Tool	Visible if the user holds any one of
`get_activity_cell`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`list_activity_cells`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`create_activity_cell`	`Activity, Edit`, `System Administration, Access`
`update_activity_cell`	`Activity, Edit`, `System Administration, Access`
`delete_activity_cell`	`Activity, Edit`, `System Administration, Access`
`get_activity_cell_treatment`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`list_activity_cell_treatments`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`create_activity_cell_treatment`	`Activity, Edit`, `System Administration, Access`
`update_activity_cell_treatment`	`Activity, Edit`, `System Administration, Access`
`delete_activity_cell_treatment`	`Activity, Edit`, `System Administration, Access`
`get_activity_treatment`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`create_activity_treatment`	`Activity, Edit`, `System Administration, Access`
`update_activity_treatment`	`Activity, Edit`, `System Administration, Access`
`delete_activity_treatment`	`Activity, Edit`, `System Administration, Access`
`list_activity_treatments`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`

Treatments

Top-level treatments (distinct from the activity-scoped treatments above).

Tool	Visible if the user holds any one of
`get_treatment`	`Treatment, View`, `Treatment, Edit`, `System Administration, Access`
`create_treatment`	`Treatment, Edit`, `System Administration, Access`
`update_treatment`	`Treatment, Edit`, `System Administration, Access`

Projects & Review Tasks

Tool	Visible if the user holds any one of
`list_projects`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`list_projects_display`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`search_projects`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`get_project`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`get_projects_for_activity`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`list_projects_for_attachment`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`get_project_dam_collection`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`create_project`	`Project, Edit`, `System Administration, Access`
`update_project`	`Project, Edit`, `System Administration, Access`
`start_project`	`Project, Edit`, `System Administration, Access`
`pause_project`	`Project, Edit`, `System Administration, Access`
`cancel_project`	`Project, Edit`, `System Administration, Access`
`close_project`	`Project, Edit`, `System Administration, Access`
`update_review_task_begin_date`	`Project, Edit`, `System Administration, Access`
`update_review_task_estimated_duration`	`Project, Edit`, `System Administration, Access`
`update_review_task_end_date`	`Project, Edit`, `System Administration, Access`

Programs

Tool	Visible if the user holds any one of
`get_program`	`Program, View`, `System Administration, Access`
`list_programs`	`Program, View`, `System Administration, Access`
`get_programs_for_activity`	`Program, View`, `System Administration, Access`
`update_program`	`Program, Edit`, `System Administration, Access`

Suppliers

Tool	Visible if the user holds any one of
`list_suppliers`	`Supplier, View`, `System Administration, Access`
`search_suppliers`	`Supplier, View`, `System Administration, Access`
`get_supplier`	`Supplier, View`, `System Administration, Access`
`update_supplier`	`Supplier, Edit`, `System Administration, Access`

Offers

Tool	Visible if the user holds any one of
`list_offers`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`get_offer`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`create_offer`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`update_offer`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`get_offer_treatments`	`Offers, View`, `Offers, Edit`, `System Administration, Access`

Proposals

Tool	Visible if the user holds any one of
`get_activity_proposal`	`Proposal, View`, `System Administration, Access`
`search_activity_proposals`	`Proposal, View`, `Proposal, Edit`, `System Administration, Access`
`get_activity_proposal_forecasts`	`Proposal, View`, `System Administration, Access`
`get_program_proposal`	`Program, View`, `Program, Edit`, `Proposal, View`, `System Administration, Access`
`search_program_proposals`	`Proposal, View`, `Proposal, Edit`, `System Administration, Access`

Content Plans

Tool	Visible if the user holds any one of
`update_content_plan`	`Content Plan, Edit`, `Integration API, Access`, `System Administration, Access`
`unlink_content_plan_collection`	`Content Plan, Edit`, `Integration API, Access`, `System Administration, Access`
`create_content_plan_collection`	`Content Plan, Edit`, `System Administration, Access`
`update_content_plan_collection`	`Content Plan, Edit`, `System Administration, Access`
`share_content_plan`	`Content Plan, Edit`, `System Administration, Access`
`remove_content_plan_activity`	`Content Plan, Edit`, `System Administration, Access`
`delete_content_plan`	`Content Plan, Edit`, `System Administration, Access`

Work Requests

Tool	Visible if the user holds any one of
`list_work_requests`	`Job Starter Portal, Access`, `System Administration, Access`
`search_work_requests`	`Job Starter Portal, Access`, `System Administration, Access`
`get_work_request`	`Job Starter Portal, Access`, `System Administration, Access`
`list_work_request_reviews`	`Work Request, View`, `Job Starter Portal, Access`, `System Administration, Access`

Invoices

Tool	Visible if the user holds any one of
`get_invoice`	`Invoice, View`, `System Administration, Access`
`create_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`update_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`delete_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`retrieve_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`submit_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`cancel_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`mark_invoice_sent`	`System Administration, Access`

Commitments

Tool	Visible if the user holds any one of
`create_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`update_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`delete_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`retrieve_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`submit_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`cancel_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`

Financial Hierarchies & Funding Accounts

Tool	Visible if the user holds any one of
`create_financial_hierarchy`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`update_financial_hierarchy`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_financial_hierarchy`	`Financial Hierarchies, View`, `Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_financial_hierarchy_node`	`Financial Hierarchies, View`, `Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_funding_account`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_funding_account_summary`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`

Journal Vouchers

Tool	Visible if the user holds any one of
`list_journal_vouchers`	`Journal Vouchers, View`, `System Administration, Access`
`search_journal_vouchers`	`Journal Vouchers, View`, `System Administration, Access`
`get_journal_voucher`	`Journal Vouchers, View`, `System Administration, Access`
`create_journal_voucher`	`Journal Vouchers, Edit`, `System Administration, Access`
`update_journal_voucher`	`Journal Vouchers, Edit`, `System Administration, Access`
`submit_journal_voucher`	`Journal Vouchers, Edit`, `System Administration, Access`
`mark_journal_voucher_sent`	`System Administration, Access`
`reject_journal_voucher`	`System Administration, Access`

Users, Groups & Roles

Administrator rights

The group and user administration tools require the Security Administrator right. Unlike most tools on this page, the general System Administration right does not make them visible on its own. The user-role tools accept either.

Tool	Visible if the user holds any one of
`get_pm_group`	`Security Administration`
`get_pm_group_membership`	`Security Administration`
`list_pm_groups`	`Security Administration`
`create_pm_group`	`Security Administration`
`update_pm_group`	`Security Administration`
`delete_pm_group`	`Security Administration`
`search_pm_users`	`Security Administration`
`create_pm_user`	`Security Administration`
`update_pm_user`	`Security Administration`
`delete_pm_user`	`Security Administration`
`reset_user_pin`	`Security Administration`
`update_my_region_preferences`	`Security Administration`
`list_domain_rights`	`Security Administration`
`list_user_roles`	`Security Administration`, `System Administration, Access`
`update_user_role`	`Security Administration`, `System Administration, Access`
`delete_user_role`	`Security Administration`, `System Administration, Access`

Teams

Tool	Visible if the user holds any one of
`get_team`	`Teams, View`, `System Administration, Access`
`list_teams`	`Teams, View`, `System Administration, Access`

Digital Assets & Attachments

Tool	Visible if the user holds any one of
`get_digital_asset`	`Digital Assets, View`, `System Administration, Access`
`update_attachment_version`	`System Administration, Access`

Annotations

Tool	Visible if the user holds any one of
`get_dam_record_reference_documents`	`System Administration, Access`
`create_public_xfdf_annotation`	`Integration API, Access`, `System Administration, Access`
`get_public_xfdf_annotations`	`Integration API, Access`, `System Administration, Access`
`delete_public_xfdf_annotation`	`Integration API, Access`, `System Administration, Access`

Other

Tool	Visible if the user holds any one of
`update_calendar_activity_type_colors`	`System Administration, Access`
`delete_chatboard`	`Chat Board, Delete`, `System Administration, Access`
`update_pick_list_options`	`System Tools, Extended Attributes Edit`, `System Administration, Access`

Aprimo MCP Server — configuration, connection details, and the full tool reference
The Invocation Pattern — when and how to call Aprimo from an orchestration platform
Authorization — how per-user authorization is enforced across Aprimo's APIs

Activities​

Activity Cells & Treatments​

Treatments​

Projects & Review Tasks​

Programs​

Suppliers​

Offers​

Proposals​

Content Plans​

Work Requests​

Invoices​

Commitments​

Financial Hierarchies & Funding Accounts​

Journal Vouchers​

Users, Groups & Roles​

Teams​

Digital Assets & Attachments​

Annotations​

Other​

Related​