Pardot Lightning App

To give Pardot users access to the Pardot Lightning App (for Standard Salesforce users only):

1. Add CRM User on the User’s Permission Set License Assignment
   1. View this help article to mass assign a Permission Set License
2. Assign Pardot Lightning App User permission set
3. Assign the user’s profile to the Pardot lightning app (PardotAppV1)
4. Assign the user’s profile to the b2bma_canvas connected app
5. Ensure the necessary Pardot tabs are visible on the user’s profile
   1. Automations
   2. Content
   3. Pardot Dashboard
   4. Pardot Email
   5. Pardot Reports
   6. Pardot Settings
   7. Prospects
6. Login as the user to confirm the Pardot lightning app is visible and accessible

To provide Pardot users additional access to Opt-in/Opt-out Prospects from Pardot:

1. In the users setup, add Use Pardot Content Experience to the users Permission Set Assignments for the user who needs access
2. In Pardot, click on Roles in the Pardot Settings tab under the User Management side panel
3. Click on the Role that the user currently belongs to
4. Under the Prospect tab in the Prospects section look at the Update Opt out field 
   1. If you're unsure of the users current role, click on Users in the left navigation panel and search for the user, their role will be listed
5. You can add the Opt-in\Opt-out permissions to the existing role if it is needed for everyone in that role; or
6. You can copy the role to create a new role that is the same, except it includes the Opt-in\Opt-out permissions
   1. Use the cog wheel under Actions or the Copy option to copy an existing Role (both standard and custom roles can be copied)
   2. Edit the role
   3. Under the Prospect tab in the Prospects section check the box to Update Opted out field 
   4. Save the new custom role
7. If you created a new Pardot Role, you'll need to click on Connectors in the left navigation panel and map the Salesforce Profile to the Pardot Role
   1. Select the Pardot Role you just created for the appropriate Salesforce profile of the user needing the access

NOTE: Field access in SF is set by user Permission Set, but in Pardot you have to assign the change to an entire SF Profile. If you only need to update the ability to Opt-in\Opt-out for one user, you'll still need to map the Salesforce Profile to the new Pardot Role, but by not giving the Permission set in SF will restrict the field for the other users in that Profile. Also, because the Role is governed by SF, without the Permission Set the Pardot Prospect permissions are also denied even if you're included in the Pardot Role because they don't have field access. 

Resources

Pardot-Salesforce User Sync

Give Users Access to the Pardot Lightning App