Add a User to Matomo

Use this workflow to grant the collaborator access to Matomo (cloud or on-premise).

Prerequisites

• Determine whether you are using Matomo Cloud or a self-hosted instance, and confirm the base URL.
• Decide which sites, segments, or roll-up dashboards the collaborator should access.
• Confirm if SSO or LDAP provisioning is enabled; if so, prepare the account in your identity system first.
• Gather the collaborator’s service account email and required role (View, Write, Admin, or Super User).
• Ensure you have Super User permissions.

Invite or Create the Account

1. Log into Matomo and open Administration → System → Users.
2. Click Add a new user (self-hosted) or Invite new user (cloud).
3. Enter the collaborator’s account details. For self-hosted, set a secure temporary password; the collaborator will change it on first login.
4. Assign the appropriate role per site:
   • Admin for implementation support.
   • Write for analysis with goal management.
   • View for reporting-only.
5. If the collaborator requires API access, copy the generated token_auth and share it securely.
6. Save the user and send confirmation to the collaborator’s team.

After Provisioning

• Verify the account appears in the user list with the correct site permissions.
• Share links to key dashboards or segments so the collaborator can onboard quickly.
• Update your IAM tracker with the user ID, roles, and date of invitation.

Troubleshooting

• SSO required: Map the new account to the correct Matomo role via your IdP group mapping.
• token_auth rotation: Generate a new token if the user already existed and provide it via secure channel.
• No email delivered: For on-premise setups, confirm your SMTP configuration is working or send the credentials manually.