What Marketing Cloud user roles exist, and how do custom roles differ from system roles?

System roles (out-of-the-box):
— Administrator: Full access to all features and administration settings.
— Analyst: Read-only access to reports and tracking data.
— Content Creator: Can create and edit emails and content blocks; cannot send.
— Channel Manager: Can create, approve, and send emails and other channel messages.
— Security Administrator: Manages user access, roles, and SSO configuration.
Custom roles: Administrators can create custom roles by selecting granular permissions at the product, feature, and action level (View, Edit, Publish, Delete). Custom roles are useful for organisations with specific access requirements not met by system roles (e.g., a role that can send emails but cannot modify content blocks).
SSO: Marketing Cloud supports SSO with a connected Salesforce org via MC Connect, allowing users to log in with their Salesforce credentials.