If you’re going to use Piwik PRO in your team, you need to create a user account for each teammate and assign them permissions to sites and apps. Optionally, you can create groups and assign permissions to them.
In this article, we’ll go over permission types and show you how to apply them for users or groups.
Account levels
Each Piwik PRO account has two levels of access available to customers: owner and user.
The difference between the owner and user is:
- Owner is the primary contact for the account and can perform all actions on the account, including adding a site/app, inviting others to join, assigning user/owner levels and granting permissions.
- User can only perform certain actions depending on the type of permissions they have for certain sites/apps. By default, a new user has no access to anything.
Types of permissions
In short, each site/app has five types of permissions:
- Manage: The user can see and edit a site/app, edit and publish tags, triggers and variables, manage permissions and use Consent Manager. But they can’t add a site/app or new user.
- Edit & publish: The user can do the same actions as on the manage level, except they can’t manage permissions.
- Edit: The user can edit a site/app and edit tags, triggers and variables. But they can’t publish changes, manage permissions or use Consent Manager.
- View: The user can see a site/app and see tags, triggers and variables.
- No access: The user can’t see anything.
For more details, see this section.
Note: A user with the owner role has access to everything and doesn’t need to have permissions granted.
Grant site or app permissions to users or groups
To assign permissions to users or groups, follow these steps:
- Go to Menu > Administration.
- Navigate to Sites & apps.
- Select the site or app for which you want to grant permissions.
- Click Permissions and pick: Users or Groups.
- Select the access level for the user or group.
Note: Users with the owner role are not listed. They have unlimited access to all sites/apps.
Compare site or app permissions
If you need to dig deeper into types of permissions for each module, take a look at the following tables.
Administration
| User action | Owner | Manage | Edit & publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| Add a site or app | ||||||
| Add a meta site/app | ||||||
| Add a user | ||||||
| Create a group | ||||||
| Manage permissions | ||||||
| Set global site/app settings |
Analytics
| User action | Owner | Manage | Edit & publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| View a dashboard | ||||||
| Add, edit, delete their dashboard | ||||||
| Add, edit, delete any dashboard but not the one set for “All sites & apps” | ||||||
| Add, edit, delete any dashboard | ||||||
| Copy any dashboard | ||||||
| View all reports | ||||||
| Add, edit, copy, delete custom reports | ||||||
| Customize a standard report | ||||||
| Export a report | ||||||
| View goals | ||||||
| Add and edit goals | ||||||
| Add and edit funnels | ||||||
| Add and edit a user flow report | ||||||
| View custom dimensions | ||||||
| Add, edit, activate, deactivate custom dimensions | ||||||
| View segments | ||||||
| Add, edit, delete segments | ||||||
| Add calculated metrics | ||||||
| Add a scheduled report | ||||||
| Add an alert | ||||||
| Add dimension value grouping | ||||||
| Add custom channel grouping | ||||||
| Integrate with Google Search Console | ||||||
| Integrate with Google Ads |
Tag Manager
| User action | Owner | Manage | Edit & publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| Publish | ||||||
| Discard changes | ||||||
| View tags, triggers and variables | ||||||
| Add, edit, delete tags, triggers and variables |
Consent Manager
| User action | Owner | Manage | Edit & publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| Use the module |
Customer Data Platform
| User action | Owner | Manage | Edit & publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| View audiences | ||||||
| Add, edit, delete audiences | ||||||
| View activations | ||||||
| Add, edit, delete activations |
Audience Manager
Deprecated
| User action | Owner | Manage | Edit & publish | Edit | View | No access |
|---|---|---|---|---|---|---|
| View audiences and profiles | ||||||
| Add, edit, delete audiences and attributes | ||||||
| Import a CSV file | ||||||
| Export audiences |