Updated: April 21, 2026
This section explains how to add a user in Google Analytics 4 (GA4). Before doing so, it’s important to understand GA4’s permission structure.
GA4 Permission Structure
GA4 permissions can be understood from two perspectives: permission levels and effective permissions.
Permission Levels
GA4 permissions are assigned at two levels:
- Account level
- Property level
Permissions follow an inheritance model. For example, if a user is granted Analyst access at the account level, that access will generally apply to all properties under that account unless specifically overridden.
Effective Permissions
Effective permissions consist of two independent components:
- Direct role (permission role)
- Data restrictions
These two settings work separately:
- Direct role: Defines what actions a user can perform in GA4.
- Data restrictions: Limits access to sensitive metrics such as cost and revenue data.
If data restrictions are enabled, certain financial metrics (e.g., revenue, cost) will be hidden from the user.
Permission Overview
The relationship between permission levels and Effective permissions is as follows:
| Level | Direct Role | Data Restrictions |
| Account Level | Administrator Editor Analyst Viwer |
No Cost Metrics No Revenue Metrics |
| Property Level | Administrator Editor Marketer Analyst Viwer |
No Cost Metrics No Revenue Metrics |
- Administrator:Full control of GA4. Can manage users (add/remove users, assign roles and restrictions) at both account and property levels.
- Editor:Full control of property-level settings. Cannot manage users. Includes all Analyst permissions.
- Marketer:Can create, edit, and delete audiences, events, and key events. Can also configure attribution settings.
- Analyst:Can create and share explorations. In GA360, can request unsampled explorations.
- Viwer:Can view configuration and data. Can modify report views (e.g., add comparisons or secondary dimensions). Can access shared assets via UI or APIs.
- None: No access to the resource. The user may still have access to other resources.
- No Cost Metrics:Restricts visibility of cost-related metrics.
- No Revenue Metrics:Restricts visibility of revenue-related metrics.
Example: Adding a User
Assume we want to grant Editor access to: [email protected]
Account Level Setup
In GA4, click「Admin」——「Account」——「Account access management」——「+」——「Add Users」, and then make the following settings:
If you want to restrict the data, check:
After saving, the user will appear in the access list and automatically receive an email notification.
Property Level Setup
In GA4, click「Admin」——「Property」——「Property access management」——「+」——「Add Users」, and then make the following settings:
If you want to restrict the data, check:
Once added, the user will be listed and notified via email.
FAQ
Error 1 :This email does’t match a Google Account
- Reason: The email address is not registered as a Google account.
- Solution: Register the email as a Google account first, then retry the invitation.
Error 2 :This user did not satisfy this organization’s user policy
- Reason: Your organization restricts GA4 access to approved email domains.
- Solution: Update the organization’s user policy.
In Google Marketing Platform Home page:
Click「Administration」——「User policy」
Add your email domain name.
Read More: Error when Adding New User to GA4




