# Setting Policy Based Audience Studio Permissions Using TD Console

You can specify user access to Segment Folders, Profiles, Predictive Scoring, Profiles API Tokens, Activations, Activation Templates, and Journeys. You can also set [Audience Column Visibility](/products/control-panel/security/policies/about-audience-column-visibility-control) to set permissions for individual attribute and behavior columns within a Parent Segment (previously Master Segment). **These permissions are also used to control access for LLM-based agents such as Audience Agent when they query the raw data of a Parent Segment.**

1. Log in to the TD Console.
2. Navigate to **Control Panel** > **Policies**.
3. Create a new or select an existing policy.
4. Select the Permissions tab and scroll down to Audience Studio.


## Audience Studio - Permissions

| **Options** | **Description** |
|  --- | --- |
| **None** | Users do not see Audience Studio in the navigation; users cannot view any Audience Studio features.  ![](/assets/tc_copy_permissions-audience-studio-2024-09-05-1.af182f7575527f336c88acc067702bbfa6939208495241e58ef0ed11bb0b5d58.9f549006.png) |
| **Full access** | Users can view all of Audience Studio's features, including profiles, segment folders, predictive scoring, and API tokens. Traffic Control permissions are displayed.  ![](/assets/tc_copy_permissions-audience-studio-2024-09-05-2.9e03b0c42bef7c7e9c5477e0ebc388321d9dfff2abef34fa75c5e9c549c1ed34.9f549006.png) |
| **Limited Access** | Account owners and administrators can select a Parent Segment. From this view, they can drill down to lower panes that enable the selection of specific segment folders. Users only see Parent Segments for which they have permissions.  ![](/assets/tc_copy_permissions-audience-studio-2024-09-05-3.ca27012f775dc48518f771dca862e74a156d33788fe7058fd622ad1dc057f3b5.9f549006.png) Select the pencil icon to change the parent segment permissions, including the configuration, folder, and segment access levels. |


1. Select the pencil icon to make permission updates for segment folders in each parent segment.
2. Select **Save** to update the policy.


![](/assets/setting-policy-based-audience-studio-permissions-using-td-console-2024-10-22-1.c81399a3d395b120cdc7231c531e0d68acf7add1868c47a16ea07816c314f4e9.9f549006.png)

**Note:** Audience Studio permissions, together with Raw Data Access, determine which Parent Segments and underlying `cdp_audience_*` databases LLM-based agents can query on behalf of each user.

## Segment Folder Permissions

When you specify Limited Access permissions and a specific parent segment, you can select Full or View permissions in all or some folders within the specified parent segment.

These settings control access to Audience Studio folders and segments. **Raw Data Access is configured per Parent Segment and is additionally required for LLM-based agents to run raw queries against `cdp_audience_*` databases.**

| Scope | Access level | Description |
|  --- | --- | --- |
| All segment folders | Full Control | Users can view, create, delete, and modify any segment folders and their content within the specified parent segment. They cannot see profiles if they do not have "Profile View" checked. With "Full Control," predictive scoring and Profile API tokens associated with the segments are visible.![](/assets/tc_copy_permissions-audience-studio-2024-09-05-4.7124affdc0a5e9126d02ddeeca57ea81dcebedbed1b34bf6a3f93bb171f3d254.9f549006.png) |
| All segment folders | View | Users can view all segment folders and their contents within the specified parent segment. With "Profiles View" enabled and, at minimum, "View" permissions, these users can also view profiles in all segment folders within specified parent segments.![](/assets/tc_copy_permissions-audience-studio-2024-09-05-5.c47f75f1f90cff95768a82c09e5da40e906667d497660dc5e80b60293e66ee10.9f549006.png) |
| Specific segment folders | Full Control | Users can view and edit specific segment folders within the specified parent segment. They cannot see profiles unless they have "Profile View" checked. Predictive scoring and API tokens associated with the segments are disabled.![](/assets/tc_copy_permissions-audience-studio-2024-09-05-7.ac8e2249526eb20b7850013456950771290775106f57011c2d6e3dc5e0261d03.9f549006.png) |
| Specific segment folders | View | Users can view specified segment folders within the selected parent segment. With "Profiles View" enabled and, at minimum, "View" permissions, these users can also view profiles in those segment folders.![](/assets/tc_copy_permissions-audience-studio-2024-09-05-8.ac8e2249526eb20b7850013456950771290775106f57011c2d6e3dc5e0261d03.9f549006.png) |


When selecting Full Control, View will automatically be selected. Keep View selected so that the user has access to the parent segment.

## Raw Data Access for LLM-based Agents

**Important:** This permission is currently available for advance configuration. The Raw Data Access permission enforcement will begin on **April 7, 2026**. We recommend configuring this permission in advance to ensure uninterrupted access for LLM-based agents.

Configure Raw Data Access when using LLM-based agents such as Audience Agent with a parent segment knowledge base or PlazmaDB knowledge base. When these agents execute Trino queries against the underlying `cdp_audience_*` databases, they run with the **executing user's permissions**, not the Knowledge Base updater's permissions.

To allow these agents to read raw audience data in a controlled way:

- **Grant Raw Data Access permission per Parent Segment**
In the relevant policy, configure **Raw Data Access** for each Parent Segment. You can set this to **Query** (read access) or **None** for each Parent Segment individually. Users can only query the underlying `cdp_audience_*` database via LLM-based agents for Parent Segments where Raw Data Access is set to **Query**.
![](/assets/raw-data-access-setting-2026-03-06.dcb8bec709ad93ca158221be42321e578c3669fe81e9cd28cbebc83d4a06c8a9.9f549006.png)
- **Do not rely on Folder/Segment permissions alone**
Even if a user has Full Control or View permissions for Segment Folders in Audience Studio, Audience Agent queries to `cdp_audience_*` databases will fail with an authorization error if Raw Data Access is not granted.


**See Also**

* [Policy-based Activation Template Permissions](/products/control-panel/security/policies/policy-based-activation-template-permissions)
* [Policy-based Traffic Control Permissions](/products/control-panel/security/policies/pbp-traffic-control-permissions)