Long overdue, admin and user permissions changes have been implemented. No you do not have to worry about someone deleting or hijacking your Google Analytics account.
Why the Change?
Prior to this change, there was only two options for users:
- Admin – Full control of everything, including changing property ownership, removing users and deleting properties and profiles
- User – Read only access. These users could not setup goals or perform normal actions that a medium-level user would complete
This meant that most users would require Admin access, a typical account could easily have more than ten admins. One disgruntled employee or consultant could easily delete or hold hostage all your data, and with GA there is no getting your data back once lost.
Now there are four user levels:
- Manage Users: Can manage account users (add/delete users, assign permissions). Does not include Edit or Collaborate. This should be only one or two people, including a high-level internal person within company and perhaps the account manager from a consultancy.
- Edit: Can perform administrative and report-related functions (e.g., add/edit/delete accounts, properties, views, filters, goals, etc., but not manage users), and see report data. Includes Collaborate. This is where level where many older admins should be. (note – accounts can still be deleted)
- Collaborate: Can create personal assets, and share them. Can collaborate on shared assets, for example, edit a dashboard or annotation. Includes Read & Analyze. This one where many of your users should be, they can view all data and perform minor changes.
- Read & Analyze: Can see report and configuration data; can manipulate data within reports (e.g., filter a table, add a secondary dimension, create a segment); can create personal assets, and share them, and see shared assets. Consider this read-only. Perfect for users where less-is-more…less buttons, less options and hopefully less confusion.
Account, Property and Profile levels
Permissions can be set at the all three levels:
- Account – The Company Level – Allow other users to have access at the company-wide level. Useful if you have multiple related websites.
- Property – A single website – Allow other users to have control of all data related to a single website (single ID Number). This is typically what you would give to a mid-level marketer or consultant. These people would typically be responsible for advanced actions.
- Profile – A single view of website data – This level would be given to users who need to have access to only a subset of data, for example mobile only or desktop only. Also useful for providing simplicity to low-level users.
What to do from here?
Go though all your analytics accounts and make sure permissions are correct. Particularly ensure that there is only one or two “Manage Users” and remaining users are properly set.