On this page
  1. Ask them to sign up first
  2. The five roles
  3. How many people per project
  4. Showing someone part of the data
  5. Many people, many projects
  6. Turn on two-step verification

Once a colleague is in the project they sign in with their own account. Nobody needs your password or an API key to read reports.

Ask them to sign up first

Invitations only work for email addresses that already have an account — the invitation doesn't send a sign-up email. So the order is:

  1. Your colleague signs up with their work email.
  2. You open Configuration › Settings › Members, enter that email and pick a role.
  3. They refresh the console and the project appears in their list.

"This email isn't registered yet" means step 1 hasn't happened, or the two of you typed different addresses.

The five roles

RoleCan doTypical person
OwnerEverything, including deleting the projectWhoever created it; one per project
AdminChange settings, invite members, handle privacy requestsThe person responsible for analytics
AnalystAll reports, plus creating goals and funnelsMarketing, product, growth
ViewerRead-only reportsManagers, outside advisers, other departments
Agent onlyLive chat workspace only, no analyticsPeople who only answer chats

A second owner can't be created through an invitation, and the owner can't be removed.

How many people per project

Seats depend on the plan: 1 on Free (just you), 3 on Pro, 10 on VIP 1 and unlimited on VIP 2. A greyed-out invite button means you are not the owner or an admin, or the project is full.

Showing someone part of the data

Admins can narrow what a member sees — for example, only the host name of the sub-brand they look after:

  • Channels, platforms, host names — reports keep only those rows.
  • Hidden properties — certain user and event properties become invisible to them.
  • Minimum masking — emails, phone numbers and similar fields shown unmasked, partly masked or fully masked. Viewers see direct identifiers fully masked by default.

Each list holds up to 50 entries. Clearing it restores the role's defaults.

Many people, many projects

If you run a dozen projects, inviting each new hire to each one gets tedious. Create a user group under Account › Members & groups: a list of emails × a list of projects with a role each. Saving writes the members into every project, and a new hire only needs to be added to the group.

One catch: removing someone from the group also removes their access to those projects, even if you had invited them by hand. Use groups only for projects where the group is the single source of access.

Turn on two-step verification

Under Account settings you can enable two-step verification with an authenticator app (TOTP). Sign-in then asks for a six-digit code as well. Accounts that read analytics can usually see a fair amount of customer data, so the extra step is worth it.