Understanding Google Analytics users and permissions


Multiple users can access an individual website’s Google Analytics account. These actions are managed within the Admin tab.

You can add users at account, property, or view level; and can restrict their access at each level.

When you add a user, you identify that person by an email address that is registered in Google accounts, and you assign the appropriate permissions.

Depending on the permissions you assign, that user can manage other users, perform administrative tasks like creating additional views and filters, and see the report data.

You must have full permissions to add and edit other users.

User permissions

You can assign various user permissions at the account, property, and view levels.

Manage Users

Can manage account users (add/delete users, assign permissions).

Does not include Edit or Collaborate.


Can perform administrative and report-related functions (e.g., add/edit/delete accounts, properties, views, filters, goals, etc., but not manage users), and see report data.

Edit permission is required at the account level to create filters. Edit permission is required at the view level to apply filters.

Includes Collaborate.


Can create personal assets, and share them. Can collaborate on shared assets, for example, edit a dashboard or annotation.

Includes Read & Analyze.

Read & Analyze

Can see report and configuration data; can manipulate data within reports (e.g., filter a table, add a secondary dimension, create a segment); can create personal assets, and share them, and see shared assets.

Cannot collaborate on shared assets.


Parent permissions are inherited by default (account > property > view). For example, when you set permissions for a user at the account level, that user then has those same permissions for all the properties and views in that account.

Permissions set for a child supersede permissions set for the parent.

Next lesson: An overview of the Google Analytics interface and options