Google Analytics User Management

Google Analytics (GA4) permissions are layered across accounts, properties, and data streams. Use this guide to standardize how the collaborator is onboarded, updated, and removed.

Access Requests at a Glance

• Start with Add User Access when the collaborator needs account-level or property-level roles.
• Apply Update Access & Roles when scopes shift, such as enabling BigQuery exports or adding data streams.
• Follow Remove User Access when the engagement closes or legal directs access removal.

Roles to Maintain

• Account Administrators: Manage billing, linked products, and property creation. Limit to core client owners plus the collaborator’s admin when necessary.
• Property Editors/Analysts: Build reports, audiences, and conversions. Assign the collaborator this role for day-to-day analytics work.
• BigQuery / API Users: Service accounts for exports or offline processing. Store credentials securely and rotate on schedule.

Governance Checklist

• Document which Google accounts or service accounts represent the collaborator and keep them in your access tracker.
• Review GA4 Access Management quarterly to confirm roles and remove unused accounts.
• Capture evidence of consent for data sharing with the collaborator where required by privacy agreements.
• Confirm the collaborator is added to the Google Cloud project used for BigQuery exports when relevant.