Heap Analytics User Management

Heap manages access through organizations and projects. Use this reference to onboard the collaborator quickly, adjust access safely, and document removals.

Access Requests at a Glance

• Follow Add User Access to invite the service account and assign project rights.
• Use Update Access & Roles when the collaborator needs new project visibility or Governance/Activate permissions.
• Reference Remove User Access when the engagement ends or the account should be paused.

Roles to Maintain

• Organization Admins: Control billing, SSO, and project creation. Maintain at least two client admins and optionally the collaborator’s admin when the collaborator handles configuration.
• Project Members: Analysts working inside a specific project. Scope the collaborator to only the projects tied to the engagement.
• Govern/Activate Admins: Optional roles when the collaborator helps manage data definitions or downstream audiences.

Governance Checklist

• Track which Heap environments (production, staging) the collaborator can access and review quarterly.
• Export Heap’s Access Logs after changes and attach them to your IAM records.
• Confirm SSO group mappings align with contractual scope before adding the collaborator.
• Document any shared app secrets or ingestion keys separately and rotate them on the agreed cadence.