This article is about Universal Analytics. If you are using the next generation of Google Analytics, refer to the Google Analytics 4 properties section of this help center.

Access and data-restriction management

This article covers access and data-restriction management for Google Analytics 4 and Universal Analytics. In both versions of Analytics, you manage access by assigning roles. In Google Analytics 4, you manage data restrictions by choosing one or both of the data-restriction options described below. In Universal Analytics, you manage data restrictions by giving users access to different reporting views.

Google Analytics 4

You can manage access and data restrictions at the account and property levels.

To assign roles and data restrictions:

  1. Click Admin.
  2. Click Access Management in the Account or Property column.
  3. Assign roles to new or existing members (e.g., users and groups). Learn more about adding and editing users.

Effective permissions are the roles and data restrictions that a member is assigned via other resources (like the organization, a user group, or an account that includes the current property) plus all the direct permissions assigned explicitly for the current resource.

Direct permissions are role and data restrictions that a member is assigned explicitly for the current resource (e.g., organization, account, property).

Four roles and two data restrictions are available:

Role Explanation
Administrator

Full control of Analytics. Can manage users (add/delete users, assign any role or data restriction). Can grant full permissions to any user, including themselves, for any account or property for which they have this role.

Includes Editor role.

(Replaces Manage Users permission.)

Editor

Full control of settings at the property level. Cannot manage users.

Includes Analyst role.

(New name for Edit permission.)

Analyst

Can create, edit, delete, and share property assets. Can collaborate on shared assets.

Includes Viewer role.

(New name for Collaborate permission.)

Property assets include things like:

Viewer

Can see settings and data; can change which data appears in reports (e.g., add comparisons, add a secondary dimension); can see shared assets via the user interface or the APIs. Cannot collaborate on shared assets. 

(New name for Read & Analyze permission.)

None The user has no role for this resource. The user may have a role for another resource.

 

Data restriction Explanation
No Cost Metrics

Cannot see metrics related to cost.

Cost metrics are unavailable in reports, explorations, audiences, insights, and alerts. See below for more information.

No Revenue Metrics

Cannot see metrics related to revenue.

Revenue metrics are unavailable in reports, explorations, audiences, insights, and alerts. See below for more information.

 

Cost and revenue metrics

In addition to the metrics listed in the following sections, cost and revenue metrics include any custom metric that is identified as a cost or revenue metric and any metric derived from a cost or revenue metric.

These lists will be updated if Analytics adds additional cost or revenue metrics.

Cost metrics

Google Ads cost

Google Ads cost per click

Google Ads video cost

Cost per conversion

Non-Google cost

Non-Google cost per click

Non-Google cost per conversion

Return on ad spend

Return on non-Google ad spend

Revenue metrics

Ad revenue

Ads preferred last click attributed revenue

Average daily revenue

Average event revenue

Average product revenue

Average product value

Average purchase revenue

Average purchase revenue per user

Average revenue per buyer

Average revenue per paid user (ARPPU)

Average revenue per user (ARPU)

Combined revenue per cohort total first opens

Combined revenue per cohort total first visits

Combined revenue per cohort total first visits and first opens

Data driven attribution revenue

Ecommerce purchase quantity

Ecommerce revenue

Event value

Event revenue

First click attributed revenue

Item price

Item refund

Item revenue

Last click attributed revenue

Lifetime ad revenue

Lifetime value (LTV)

Linear attributed revenue

Max daily revenue

Min daily revenue

Position based attributed revenue

Predicted revenue

Product revenue

Purchase revenue

Refunds

Return on ad spend

Return on non-Google ad spend

Revenue

Time decay attributed revenue

Total ad revenue

Total revenue

Parent roles are inherited by default (e.g., account > property). For example, when you give a user a role at the account level, that user then has the same role for all the properties in that account.

A user's effective permissions equate to the most-permissive role for that resource.

For example, if a user has the Editor role for the account, then that user has the Editor role for all of the properties in that account, regardless of whether the user is also assigned a less-permissive role for one of the properties.

In addition, if a user is assigned a more-permissive role for a property than the user has at the account level, then that more-permissive role applies for that property.

You can add data restrictions as direct permissions but you cannot remove them if they're in effect as inherited permissions. For example, if a user is assigned No Cost Metrics at the account level, then that user cannot see cost metrics for any property in the account. You could, however, add the No Revenue Metrics restriction for one or more of the properties in the account.

To see which users have which roles, you have a couple of options. From the User Management page at the account or property level:

  • Search for a specific user name to see that user's roles.
  • Click the Account Roles column head to sort the list by roles.

How data restrictions affect other Analytics features

Data restrictions are enforced in both the Analytics interface and analogous Analytics API calls.

Data restrictions are created and applied via Analytics access management. Users may not be subject to these restrictions if they have permissions for Analytics based on permissions in other Google products that are linked to Analytics.

Feature Effect
Reports

Restricted metric values and values derived from restricted metrics do not appear in reports. Users see 0 instead.

Restricted metrics are available in metric pickers associated with reports (e.g., when customizing a report). Users subject to data restrictions can add those metrics, but cannot view the results (e.g., can add the metrics to custom reports, but cannot see the metric values in those reports).

Explorations

Restricted metrics do not appear in explorations.

Restricted metrics are available in metric pickers associated with explorations (e.g., when creating an exploration). Users subject to data restrictions can add those metrics, but cannot view the results (e.g,, can add the metrics to explorations, but cannot see the metric values in those explorations).

Audiences

Restricted metrics are available in metric pickers associated with audiences. Users subject to data restrictions can create audiences based on restricted metrics and edit audience names after creation, but those users are subject to the limitations listed below.

Cannot use an audience (e.g., as a dimension filter) that includes restricted metrics.

Cannot see audience count for audiences that include restricted metrics.

Cannot add audience triggers to audiences based on restricted metrics.

Automated insights Cannot see automated insights based on restricted metrics in the user interface.
Custom insights

Users with permission can create and edit custom insights based on restricted metrics.

Cannot see custom insights in the user interface and cannot receive them via email.

Custom metrics Users with permission can create custom metrics and indicate that those metrics include cost or revenue data. Users with corresponding data restrictions are not able to remove indications that custom metrics include cost or revenue data. Access to those custom metrics is subject to all the limitations listed in this article.

 

Universal Analytics

You can assign user permissions In Analytics at the account, property, and view levels.

To assign permissions:

  1. Click Admin.
  2. Click Access Management in the Account, Property, or View column.
  3. Assign roles to new or existing members (e.g., users and groups). Learn more about adding and editing users.

Effective permissions are the roles and data restrictions that a member is assigned via other resources (like the organization, a user group, or an account that includes the current property) plus all the direct permissions assigned explicitly for the current resource.

Direct permissions are role and data restrictions that a member is assigned explicitly for the current resource (e.g., organization, account, property).

Four roles and two data restrictions are available:

Role Explanation
Administrator

Full control of Analytics. Can manage users (add/delete users, assign any role or data restriction). Can grant full permissions to any user, including themselves, for any account or property for which they have this role.

Includes Editor role.

(Replaces Manage Users permission.)

Editor

Full control of settings at the property level. Cannot manage users.

Includes Analyst role.

(New name for Edit permission.)

Analyst

Can create, edit, delete, and share property assets. Can collaborate on shared assets.

Includes Viewer role.

(New name for Collaborate permission.)

Property assets include things like:

Viewer

Can see report and configuration data; can manipulate data within reports (e.g., add comparisons, add a secondary dimension); can create personal assets, and share them, and see shared assets via the user interface or the APIs. Cannot collaborate on shared assets. 

(New name for Read & Analyze permission.)

None The user has no role for this object. The user may have a role for another object.

 

To see which users have which roles, you have a couple of options. From the User Management page at the account, property, or view level:

  • Search for a specific user name to see that user's permissions.
  • Click the Account Permissions column head to sort the list by permissions.
Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
69256
false