Users & Roles
Migration Center is in beta. It may not be turned on for your account yet. To request access, contact Paminga Support.
Users & Roles is the first phase of Migration Center, and it comes first for a reason: everything you migrate afterwards is owned by someone, and workspace access in the Folders & Programs phase is granted to the teams your users belong to.
The phase has two steps: Import & Create Roles, then Provision Users. Both start from CSV files you export from Marketo Admin → Users & Roles.
Import & Create Roles
Import the Roles File
Export the Roles & Permissions file from Marketo Admin → Users & Roles, then upload it as the Roles & Permissions CSV.
Migration Center lists every role it found. Re-importing the file later updates the role list without touching the selections you've already made. Each role's user count fills in once you import the User List in the next step.
Choose and Review Roles
Check the roles you want to bring over. Click a role to see exactly what it will receive in Paminga:
- Will receive: the Paminga permissions translated from that role's Marketo permissions. You can adjust this list, and reset it to the original translation at any time.
- Unable to map: Marketo permissions with no Paminga equivalent. These are listed so you can see what didn't carry over.
- Create as platform admin role: turn this on and the role receives every permission, so the per-permission breakdown no longer applies.
Migrate Roles
Click Migrate Roles. Each selected role is created as a new global role in Paminga, alongside the default roles your account already has. Nothing is merged into your existing roles.
A role whose Marketo permissions translate to nothing is still created, empty, with a warning, so the role name and its users still carry over. You can grant its permissions afterwards in Permissions.
If you change a migrated role's selections and migrate again, Paminga brings that role back in line with your changes. Permissions you've added by hand in Paminga's own Roles settings are left alone.
Skipping Roles
Roles are optional. If you'd rather build roles yourself in Paminga, click Skip Migrating Roles. The skip is saved, you move straight to users, and you can come back and migrate roles at any time.
Provision Users
Import the User List
Export the User List from Marketo Admin → Users & Roles and upload it as the User List CSV. Like the roles file, you can re-import it at any time without losing your selections.
Choose Users and Their Roles
Each user appears with their name, email, type, and roles. By default:
- Regular users are selected for migration
- API-only users are listed but not selected. You can opt one in, and it's created without roles unless you add some.
Each user is given the Paminga counterparts of their Marketo roles. To give someone a different set, use Add a Role to this User on their row.
A user marked Already in Paminga has an account with that email address already. Migrating them assigns the roles shown, and no new account is created. Role assignment only ever adds roles; it never removes one a user already has.
Migrate roles before users. If any selected roles haven't been migrated yet, Migration Center warns you that users provisioned now will be created without those roles.
Migrate Users
Click Migrate Users. Selected users are created (or updated) in Paminga.
No welcome emails are sent. You decide when your team gets access, which matters when you're migrating weeks ahead of the cutover. When you're ready, your users can sign in through the normal password reset flow, or you can manage them in Users.
If an email address can't be used (for example, it already belongs to a user in a different Paminga account), that one user is marked with an error and the rest of the run continues.
Skipping Users
Click Skip Migrating Users if you'd rather create users yourself. Like the roles skip, it's saved and reversible.
What Completes This Phase
Users & Roles is complete when roles are migrated (or skipped) and users are migrated (or skipped). Migrating only one of the two leaves the phase Partially complete, and Folders & Programs stays locked until both are done.
