MCP Tool Permission Map

These are the permissions that make each MCP tool visible to your agent. Aprimo's MCP Server tailors the tool list it advertises to each connected user: a tool appears in the agent's tools/list only when the user holds the permission(s) mapped to it below. This keeps the advertised tool set focused on what the user can actually work with, and reduces the context an agent has to reason over.

Productivity Management (PM) and DAM are governed independently, and read differently:

PM tools (below, under PM) use OR logic: holding any single one of the listed permissions is enough.
DAM tools (below, under DAM) use AND logic: a tool that lists more than one permission requires all of them together. Most DAM tools list only one permission, so this distinction only matters for the handful explicitly marked "requires all of."

How to read this page

Tools not listed here have no visibility gate. They are shown to every connected user — for both PM and DAM. Absence from this page means "always visible," not "hidden."
The System Administration right surfaces almost everything on the PM side. It appears as an option on nearly every PM tool. The user- and group-administration tools are the exception — they require the Security Administrator right specifically (see Users, Groups & Roles).
Permission names are what your admins see. PM permissions are the Aprimo functional rights granted per user; DAM permissions are the named checkboxes on a user's DAM Permissions tab in System Studio.

Visibility is not authorization

This map only controls whether a tool is shown to the agent — it does not grant access. Every tool call is still authorized per user by Aprimo at execution time. For many tools, holding the permission that surfaces the tool is necessary but not sufficient: the user must additionally be on the relevant access list, finance group, field group, or record to succeed. A visible tool can still return an authorization error when the agent calls it.

PM

Activities

Includes activity roles and the Activity-backed generic object.

Tool	Visible if the user holds any one of
`get_activity`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`list_activities`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`search_activities`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`get_associated_activities`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`create_activity`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`update_activity`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`delete_activity`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`create_activity_milestone`	`Activity, Edit`, `System Administration, Access`
`list_activity_roles`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`get_activity_role`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`create_activity_role`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`update_activity_role`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`delete_activity_role`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`add_activity_role_members`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`remove_activity_role_member`	`Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`get_generic_object_alpha`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`
`list_generic_object_alpha_for_activity`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`

Activity Cells & Treatments

Tool	Visible if the user holds any one of
`get_activity_cell`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`list_activity_cells`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`create_activity_cell`	`Activity, Edit`, `System Administration, Access`
`update_activity_cell`	`Activity, Edit`, `System Administration, Access`
`delete_activity_cell`	`Activity, Edit`, `System Administration, Access`
`get_activity_cell_treatment`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`list_activity_cell_treatments`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`create_activity_cell_treatment`	`Activity, Edit`, `System Administration, Access`
`update_activity_cell_treatment`	`Activity, Edit`, `System Administration, Access`
`delete_activity_cell_treatment`	`Activity, Edit`, `System Administration, Access`
`get_activity_treatment`	`Activity, View`, `Activity, Edit`, `System Administration, Access`
`create_activity_treatment`	`Activity, Edit`, `System Administration, Access`
`update_activity_treatment`	`Activity, Edit`, `System Administration, Access`
`delete_activity_treatment`	`Activity, Edit`, `System Administration, Access`
`list_activity_treatments`	`Activity, View`, `Activity, Edit`, `Content Plan, Create and Edit Activities`, `System Administration, Access`

Treatments

Top-level treatments (distinct from the activity-scoped treatments above).

Tool	Visible if the user holds any one of
`get_treatment`	`Treatment, View`, `Treatment, Edit`, `System Administration, Access`
`create_treatment`	`Treatment, Edit`, `System Administration, Access`
`update_treatment`	`Treatment, Edit`, `System Administration, Access`

Projects & Review Tasks

Tool	Visible if the user holds any one of
`list_projects`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`list_projects_display`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`search_projects`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`get_project`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`get_projects_for_activity`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`list_projects_for_attachment`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`get_project_dam_collection`	`Project, View`, `Task Portal, Access`, `Job Starter Portal, Access`, `Review Portal, Access`, `System Administration, Access`
`create_project`	`Project, Edit`, `System Administration, Access`
`update_project`	`Project, Edit`, `System Administration, Access`
`start_project`	`Project, Edit`, `System Administration, Access`
`pause_project`	`Project, Edit`, `System Administration, Access`
`cancel_project`	`Project, Edit`, `System Administration, Access`
`close_project`	`Project, Edit`, `System Administration, Access`
`update_review_task_begin_date`	`Project, Edit`, `System Administration, Access`
`update_review_task_estimated_duration`	`Project, Edit`, `System Administration, Access`
`update_review_task_end_date`	`Project, Edit`, `System Administration, Access`

Programs

Tool	Visible if the user holds any one of
`get_program`	`Program, View`, `System Administration, Access`
`list_programs`	`Program, View`, `System Administration, Access`
`get_programs_for_activity`	`Program, View`, `System Administration, Access`
`update_program`	`Program, Edit`, `System Administration, Access`

Suppliers

Tool	Visible if the user holds any one of
`list_suppliers`	`Supplier, View`, `System Administration, Access`
`search_suppliers`	`Supplier, View`, `System Administration, Access`
`get_supplier`	`Supplier, View`, `System Administration, Access`
`update_supplier`	`Supplier, Edit`, `System Administration, Access`

Offers

Tool	Visible if the user holds any one of
`list_offers`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`get_offer`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`create_offer`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`update_offer`	`Offers, View`, `Offers, Edit`, `System Administration, Access`
`get_offer_treatments`	`Offers, View`, `Offers, Edit`, `System Administration, Access`

Proposals

Tool	Visible if the user holds any one of
`get_activity_proposal`	`Proposal, View`, `System Administration, Access`
`search_activity_proposals`	`Proposal, View`, `Proposal, Edit`, `System Administration, Access`
`get_activity_proposal_forecasts`	`Proposal, View`, `System Administration, Access`
`get_program_proposal`	`Program, View`, `Program, Edit`, `Proposal, View`, `System Administration, Access`
`search_program_proposals`	`Proposal, View`, `Proposal, Edit`, `System Administration, Access`

Content Plans

Tool	Visible if the user holds any one of
`update_content_plan`	`Content Plan, Edit`, `Integration API, Access`, `System Administration, Access`
`unlink_content_plan_collection`	`Content Plan, Edit`, `Integration API, Access`, `System Administration, Access`
`create_content_plan_collection`	`Content Plan, Edit`, `System Administration, Access`
`update_content_plan_collection`	`Content Plan, Edit`, `System Administration, Access`
`share_content_plan`	`Content Plan, Edit`, `System Administration, Access`
`remove_content_plan_activity`	`Content Plan, Edit`, `System Administration, Access`
`delete_content_plan`	`Content Plan, Edit`, `System Administration, Access`

Work Requests

Tool	Visible if the user holds any one of
`list_work_requests`	`Job Starter Portal, Access`, `System Administration, Access`
`search_work_requests`	`Job Starter Portal, Access`, `System Administration, Access`
`get_work_request`	`Job Starter Portal, Access`, `System Administration, Access`
`list_work_request_reviews`	`Work Request, View`, `Job Starter Portal, Access`, `System Administration, Access`

Invoices

Tool	Visible if the user holds any one of
`get_invoice`	`Invoice, View`, `System Administration, Access`
`create_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`update_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`delete_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`retrieve_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`submit_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`cancel_invoice`	`Invoice, Edit`, `Invoice, Mass Entry`, `System Administration, Access`
`mark_invoice_sent`	`System Administration, Access`

Commitments

Tool	Visible if the user holds any one of
`create_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`update_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`delete_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`retrieve_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`submit_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`
`cancel_commitment`	`Commitments, Edit`, `Commitment, Mass Entry`, `System Administration, Access`

Financial Hierarchies & Funding Accounts

Tool	Visible if the user holds any one of
`create_financial_hierarchy`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`update_financial_hierarchy`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_financial_hierarchy`	`Financial Hierarchies, View`, `Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_financial_hierarchy_node`	`Financial Hierarchies, View`, `Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_funding_account`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`
`get_funding_account_summary`	`Financial, Finance Group Administrator`, `Financial, General Administrator`, `System Administration, Access`

Journal Vouchers

Tool	Visible if the user holds any one of
`list_journal_vouchers`	`Journal Vouchers, View`, `System Administration, Access`
`search_journal_vouchers`	`Journal Vouchers, View`, `System Administration, Access`
`get_journal_voucher`	`Journal Vouchers, View`, `System Administration, Access`
`create_journal_voucher`	`Journal Vouchers, Edit`, `System Administration, Access`
`update_journal_voucher`	`Journal Vouchers, Edit`, `System Administration, Access`
`submit_journal_voucher`	`Journal Vouchers, Edit`, `System Administration, Access`
`mark_journal_voucher_sent`	`System Administration, Access`
`reject_journal_voucher`	`System Administration, Access`

Users, Groups & Roles

Administrator rights

The group and user administration tools require the Security Administrator right. Unlike most tools on this page, the general System Administration right does not make them visible on its own. The user-role tools accept either.

Tool	Visible if the user holds any one of
`get_pm_group`	`Security Administration`
`get_pm_group_membership`	`Security Administration`
`list_pm_groups`	`Security Administration`
`create_pm_group`	`Security Administration`
`update_pm_group`	`Security Administration`
`delete_pm_group`	`Security Administration`
`search_pm_users`	`Security Administration`
`create_pm_user`	`Security Administration`
`update_pm_user`	`Security Administration`
`delete_pm_user`	`Security Administration`
`reset_user_pin`	`Security Administration`
`update_my_region_preferences`	`Security Administration`
`list_domain_rights`	`Security Administration`
`list_user_roles`	`Security Administration`, `System Administration, Access`
`update_user_role`	`Security Administration`, `System Administration, Access`
`delete_user_role`	`Security Administration`, `System Administration, Access`

Teams

Tool	Visible if the user holds any one of
`get_team`	`Teams, View`, `System Administration, Access`
`list_teams`	`Teams, View`, `System Administration, Access`

Digital Assets & Attachments

Tool	Visible if the user holds any one of
`get_digital_asset`	`Digital Assets, View`, `System Administration, Access`
`update_attachment_version`	`System Administration, Access`

Annotations

Tool	Visible if the user holds any one of
`get_dam_record_reference_documents`	`System Administration, Access`
`create_public_xfdf_annotation`	`Integration API, Access`, `System Administration, Access`
`get_public_xfdf_annotations`	`Integration API, Access`, `System Administration, Access`
`delete_public_xfdf_annotation`	`Integration API, Access`, `System Administration, Access`

Other (PM)

Tool	Visible if the user holds any one of
`update_calendar_activity_type_colors`	`System Administration, Access`
`delete_chatboard`	`Chat Board, Delete`, `System Administration, Access`
`update_pick_list_options`	`System Tools, Extended Attributes Edit`, `System Administration, Access`

DAM

DAM tools are gated on the permissions found on a user's DAM Permissions tab in System Studio. Almost every tool below is gated on a single permission; where a tool needs more than one, the table says so explicitly and the user must hold all of them together, not just one.

Permissions & Access Lists

Tool	Visible if the user holds
`preview_create_access_list`	`Can manage access lists`
`apply_create_access_list`	`Can manage access lists`
`preview_access_list_members_by_id`	`Can manage access lists`
`apply_access_list_members_by_id`	`Can manage access lists`
`preview_access_list_members_by_key`	`Can manage access lists`
`apply_access_list_members_by_key`	`Can manage access lists`
`delete_access_list`	`Can manage access lists`
`delete_access_list_by_key`	`Can manage access lists`
`preview_permission_definition`	`Change setting definition`
`apply_permission_definition`	`Change setting definition`

Field Definitions

Field group permissions are per field group

Manage profile and fields of field group isn't one tenant-wide checkbox — it's granted separately for each field group, the same way a user is granted access to individual access lists. A user editing a field definition needs that permission for every field group the definition belongs to.

Tool	Visible if the user holds
`create_field_definition`	`Create field definition`
`delete_field_definition`	`Delete field definition`
`update_field_definition`	`Manage profile and fields of field group`
`create_field_group`	`Create field group`
`update_field_group`	`Manage profile and fields of field group`
`delete_field_group`	`Delete field group`
`list_field_population_log_summary`	`Ability to read the application log`
`get_field_population_log_recent`	`Ability to read the application log`

File Types

Tool	Visible if the user holds
`create_file_type`	`Create file type`
`update_file_type`	`Change file type`
`delete_file_type`	`Delete file type`

Languages & Translations

Tool	Visible if the user holds
`create_language`	`Create language`
`update_language`	`Change language`
`delete_language`	`Delete language`
`update_language_synonyms`	`Change language`
`create_translation`	`Create translation`
`update_translation`	`Change translation`
`delete_translation`	`Delete translation`

Rules

Tool	Visible if the user holds
`create_rule`	`Create rules`
`update_rule`	`Change Rules`
`delete_rule`	`Delete Rule`

Watermarks

Tool	Visible if the user holds
`create_watermark`	`Create watermark`
`update_watermark`	`Change watermarks`
`delete_watermark`	`Delete watermark`

Image Overlays & Annotations

Tool	Visible if the user holds
`create_image_overlay`	`Create watermark`

Settings

Tool	Visible if the user holds
`create_setting_category`	`Create setting category`
`update_setting_category`	`Change setting category`
`delete_setting_category`	`Delete setting category`
`create_setting_definition`	`Create setting definition`
`update_setting_definition`	`Change setting definition`
`delete_setting_definition`	`Delete setting definition`

Downloads & Public Links

Tool	Visible if the user holds
`create_public_link`	`Can configure the public urls of content items`
`update_public_link`	`Can configure the public urls of content items`
`delete_public_link`	`Can configure the public urls of content items`
`submit_public_link`	`Submit maintenance jobs` and `Can configure the public urls of content items`
`create_download_agreement`	`Change system settings`
`update_download_agreement`	`Change system settings`
`delete_download_agreement`	`Change system settings`
`accept_download_link_agreement`	`Submit maintenance jobs`
`get_download_link`	`View maintenance jobs`
`list_download_link_targets`	`View maintenance jobs`
`list_download_links`	`View maintenance jobs`
`submit_shared_download_link`	`Submit maintenance jobs`
`check_shared_download_link`	`View maintenance jobs`
`check_public_link`	`View maintenance jobs`

System Administration & Maintenance

Tool	Visible if the user holds
`create_maintenance_job`	`Submit maintenance jobs`
`check_maintenance_job`	`View maintenance jobs`
`list_maintenance_jobs`	`View maintenance jobs`
`get_maintenance_job_target`	`View maintenance jobs`
`list_maintenance_job_targets`	`View maintenance jobs`

Orders

Tool	Visible if the user holds
`get_order_target`	`View maintenance jobs`
`list_order_targets`	`View maintenance jobs`
`list_orders`	`View maintenance jobs`
`update_order`	`View maintenance jobs`

Records

Tool	Visible if the user holds
`check_download_order_status`	`View maintenance jobs`
`get_record_download_url`	`Submit maintenance jobs` and `View maintenance jobs`

Record Lifecycle & Edit Sessions

Tool	Visible if the user holds
`apply_and_save_record_edit`	`Create record`
`execute_record_checkout`	`View maintenance jobs` and `Submit maintenance jobs`
`get_record_checkout_status`	`View maintenance jobs`

Files & File Versions

Tool	Visible if the user holds
`check_out_file`	`View maintenance jobs` and `Submit maintenance jobs`
`update_file_process_action`	`Change system settings`
`list_file_version_process_action_log`	`Can view the audit trail of content items`

Upload

Tool	Visible if the user holds
`create_record_with_file`	`Create record`

Aprimo MCP Server — configuration, connection details, and the full tool reference
The Invocation Pattern — when and how to call Aprimo from an orchestration platform
Authorization — how per-user authorization is enforced across Aprimo's APIs

PM​

Activities​

Activity Cells & Treatments​

Treatments​

Projects & Review Tasks​

Programs​

Suppliers​

Offers​

Proposals​

Content Plans​

Work Requests​

Invoices​

Commitments​

Financial Hierarchies & Funding Accounts​

Journal Vouchers​

Users, Groups & Roles​

Teams​

Digital Assets & Attachments​

Annotations​

Other (PM)​

DAM​

Permissions & Access Lists​

Field Definitions​

File Types​

Languages & Translations​

Rules​

Watermarks​

Image Overlays & Annotations​

Settings​

Downloads & Public Links​

System Administration & Maintenance​

Orders​

Records​

Record Lifecycle & Edit Sessions​

Files & File Versions​

Upload​

Related​

PM