Permission levels control what users can see and do on sites, apps, meta sites, and meta apps.
Use this article to compare permission levels and understand what users can do with each one. To learn how to assign permission levels, see Manage user permissions.
Permissions for sites and apps
Each site or app has five permission levels:
- Manage: The user can see and edit the site or app, edit and publish tags, triggers and variables, manage permissions and use Consent Manager. They can’t add sites, apps or users.
- Publish: The user can see and edit the site or app, edit and publish tags, triggers and variables, and use Consent Manager. They can’t manage permissions.
- Edit: The user can edit the site or app and edit tags, triggers and variables. They can’t publish changes, manage permissions or use Consent Manager.
- View: The user can see the site or app as well as tags, triggers and variables.
- No access: The user can’t access the site or app.
Owners have full access to the account. When Owner access is turned on, separate permission settings aren’t shown.
Compare permissions by module
Use the tables below to see what each permission level lets a user do.
Administration
| User action | Owner | Manage | Publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| Add a site or app | ||||||
| Add a meta site or app | ||||||
| Add a user | ||||||
| Create a group | ||||||
| Manage permissions | ||||||
| Set global site or app settings |
Analytics
Note: The permissions below apply only to items a user can access. ‘Any’ includes items created by the user and items shared by other users. Private items created by other users remain hidden, even if the user has permission to edit or delete items.
| User action | Owner | Manage | Publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| View a dashboard | ||||||
| Add, edit or delete their own dashboard | ||||||
| Add, edit or delete any dashboard, but not the one set for "All sites & apps" | ||||||
| Add, edit or delete any dashboard | ||||||
| Copy any dashboard | ||||||
| View all reports | ||||||
| Add, edit, or delete own custom reports | ||||||
| Add, edit, or delete any custom report | ||||||
| Copy any custom report | ||||||
| Customize a standard report | ||||||
| Export a report | ||||||
| View goals | ||||||
| Add or edit goals | ||||||
| Add or edit their own funnels | ||||||
| Add or edit any funnels | ||||||
| Copy any funnel | ||||||
| Add or edit their own user flow report | ||||||
| Add or edit any user flow report | ||||||
| Copy any user flow report | ||||||
| View custom dimensions | ||||||
| Add, edit, activate or deactivate custom dimensions | ||||||
| View segments | ||||||
| Add, edit or delete their own segments | ||||||
| Add, edit or delete any segment, but not the one set for "All sites & apps" | ||||||
| Add calculated metrics | ||||||
| Add a scheduled report | ||||||
| Add an alert | ||||||
| Add dimension value grouping | ||||||
| Add a custom channel | ||||||
| Set a custom channel as default | ||||||
| Integrate with Google Search Console | ||||||
| Integrate with Google Ads |
Tag Manager
| User action | Owner | Manage | Publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| Publish | ||||||
| Discard changes | ||||||
| View tags, triggers and variables | ||||||
| Add, edit or delete tags, triggers and variables |
It compares publishing, discarding changes, viewing tags, triggers and variables, and editing them.
Consent Manager
| User action | Owner | Manage | Publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| Use the module |
Note: Piwik PRO Consent Manager is now offered only on Enterprise plans. Some customers on Business plans may still have access through an existing license.
Data Activation
It covers viewing and managing audiences, activations, data imports and custom attributes.
| User action | Owner | Manage | Publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| View audiences | ||||||
| Add, edit or delete audiences | ||||||
| View activations | ||||||
| Add, edit or delete activations | ||||||
| View data imports | ||||||
| Add, edit or delete data imports | ||||||
| Add or edit custom attributes | ||||||
| View funnel recovery bar messages | ||||||
| Create funnel recovery bar messages | ||||||
| Edit or delete funnel recovery bar messages they created | ||||||
| Edit or delete funnel recovery bar messages created by others |
Permissions for meta sites and apps
Permissions for meta sites and apps are set separately from permissions for individual sites and apps.
Each meta site or meta app has four permission levels:
- Manage: The user can see meta site or app settings, manage permissions, and edit and publish tags, triggers and variables.
- Edit: The user can work with reports and edit tags, triggers and variables. They can’t publish changes.
- View: The user can see reports, tags, triggers and variables.
- No access: The user can’t access the meta site or app.
Note: A user can also inherit access to an individual site or app through a meta site or app. If their direct permission and the permission they get through the meta site or app are different, the higher permission applies.
Compare permissions by module
Administration
| User action | Owner | Manage | Edit | View | No access |
|---|---|---|---|---|---|
| Add or delete a meta site or app | |||||
| Add a site or app to the meta site or app | |||||
| View meta site or app settings | |||||
| Edit the meta site or app name, time zone and currency | |||||
| View and assign permissions to users | |||||
| View group permissions | |||||
| Assign permissions to groups |
Analytics
| User action | Owner | Manage | Edit | View | No access |
|---|---|---|---|---|---|
| View a dashboard | |||||
| Add, edit, copy, delete a dashboard | |||||
| View all reports | |||||
| Add, edit, or delete own custom reports | |||||
| Add, edit, or delete any custom report | |||||
| Copy any custom report | |||||
| Customize a standard report | |||||
| Export a report | |||||
| View segments | |||||
| Add, edit, delete segments |
Tag Manager
| User action | Owner | Manage | Edit | View | No access |
|---|---|---|---|---|---|
| Publish | |||||
| Discard changes | |||||
| View tags, triggers and variables | |||||
| Add, edit, delete tags, triggers and variables |