User groups

In this article:

About user groups

User groups simplify the process of aligning users, organizational structures, and permissions.

User groups can include users and other user groups as members.

You can assign user groups permissions for an organization and for individual product accounts within the organization. Members of a group inherit that group's permissions, and also retain any permissions they have separately.

You cannot assign the following permissions to a group:

  • Google Tag Manager: Admin (account); Approve, Publish (container)
  • Google Optimize: Admin (account); Edit, Publish (container)

You need to assign these permissions to users in the individual products.

Group management

When you create a group, you are the group's owner. You can designate other owners.

Groups are visible only within the organization in which you create them. Organization admins and product admins can see all user groups in their own organizations.

User groups can be nested inside other groups. This is helpful if you want to model complex hierarchies, e.g., an All Employees group that includes the groups North America Employees, Europe Employees, and Asia Employees.

User admins for an organization and user administrators for analytics products can create user groups.

User admins for an organization can add users to and remove users from any group in the organization. Group owners can add users to and remove users from any group they own.

When you add users to a group, they become members of the organization if they were not already members.

Recommendations

While you have a lot of flexibility with user groups, we recommend using only two types:

  • People oriented (who reports to whom)
  • Role oriented (who fulfills the role, which permissions are necessary to the role)

In addition, we recommend using a simple naming standard in order to avoid duplication and to easily distinguish one from another.

For example, for people-oriented groups, you could use a naming standard like:

  • Direct Reports: Jane Smith (everyone who reports to Jane Smith)
  • Direct Reports: John Doe (everyone who reports to John Doe)

For role-oriented groups, you could use a naming standard like:

  • Data Analysts: EMEA (all EMEA data analysts, and the required permissions)
  • Data Analysts: North America (all North America data analysts, and the required permissions)

Create a user group

When you create a user group, you:

  • Enter a group name and description (Step 5)
  • Add organization administrator roles to the group if necessary (Step 7 - 8)
  • Add users and/or existing groups to the new group (Step 9 - 12)
  • Add the new group to other existing groups if necessary (Step 13 - 14)
  • Add product-account permissions to the new group (Step 15 - 17)

To create a user group:

  1. Sign in to Google Marketing Platform.
  2. Click Administration > Organizations, and select the organization you want.
  3. Click User groups.
  4. Click +
  5. Enter a name and description, then click Create.
  6. In Group details, click edit.
  7. In Organization permissions, click edit.
  8. Add any of the organization administrator roles.
    Click SAVE.
  9. To add users and other groups to the new group, click Members.
  10. Click +.
  11. Enter a comma- or space-separated list of email addresses.
    Add other groups to the current group if necessary. (Click ADD GROUP.)
    Make those users/groups owners of the current group if necessary. (Turn the Permissions > Owner switch on.)
  12. Click Add, and close the group panel.
  13. To add the current group to other groups, click Group memberships.
  14. Click +.
    On the next panel, select the groups you want, then click DONE.
  15. To add product-account permissions, click one of the product-account slats.

    You cannot assign the following permissions to a group:

    • Google Tag Manager: Admin (account); Approve, Publish (container)
    • Google Optimize: Admin (account); Edit, Publish (container)

    You need to assign these permissions to users in the individual products.

  16. Click + to select the account you want to add permissions for, then click DONE.
  17. Click edit for the added account, select the permissions you want, then click SAVE.

Edit a user group

  1. Sign in to Google Marketing Platform.
  2. Click Administration > Organizations, and select the organization you want.
  3. Click User groups.
  4. Click the relevant group.
  5. Click through the configuration of the group as described in the Create… procedure above, and edit any of the settings.

Delete a user group

  1. Sign in to Google Marketing Platform.
  2. Click Administration > Organizations, and select the organization you want.
  3. Click User groups.
  4. In the row for the group you want to delete, click More, then click Delete group.
  5. To delete multiple groups, select the check box for each group, click More above the group list, then click Delete selected groups.
Was this article helpful?
How can we improve it?