This article will help you:
|
User permissions define the level of Amplitude access a user in your organization will have. Usually, permissions are based on a user's role, though project-level permissions and permission groups are available for Enterprise customers who need the ability to better target levels of security.
The person who sets user permissions is the Admin. The Admin is the first user of any Amplitude organization, and each organization must have at least one Admin (any Admin can designate other users as Admins as well). When new users are first invited to an organization, they are assigned the viewer role by default.
In Amplitude, user permissions exist at the organization level. Once assigned a permission level, a user in an organization will then have the same level of access to all projects within that organization.
Learn more about how to create and manage organizations.
User roles and permissions in Amplitude
Role |
Permissions |
---|---|
Viewer Recommended role for third parties, if you do not want them creating content that the rest of the organization can find. |
Note that Viewers:
|
Member Recommend for the majority of Amplitude users in your organization. |
All Viewer permissions, plus:
Note that Members:
|
Manager Recommended for users who need access to all content created within Amplitude (does not include undiscoverable dashboards and charts) and ability to make changes to project settings. |
All Member permissions, plus:
|
Admin The highest-level permissions set in an organization. We recommend limiting the number of users in an organization who are Admins. The Admin role can only be granted or revoked by existing Admins. |
All Manager permissions, plus:
|
All users |
|
Add users to your organization
To add users to your organization and assign them user roles, follow these steps:
- Navigate to
> Members. The Team Members page will open.
- Click Invite New Users.
- Type the email address of the user you want to add. Then press Enter. The user will appear in the list of members to be invited.
- From the Role dropdown, select the appropriate role for that person. You may also optionally specify a team space for that user.
- Repeat steps 3 and 4 until all the users you want to add are listed. Then click Next.
- From the Default Project dropdown, select the project the user is likely to work on the most. Then click Next.
- Review your work and click Send Invites when you're ready.
Change user permissions based on user roles
To change user permissions in Amplitude, follow these steps:
- Navigate to
> Members. The Team Members page will open.
- Check the box next to the name of the user whose permissions you'd like to edit. You can select multiple users at once.
- Click on Manage Project Access.
- In the modal that appears, find the project you want to adjust permissions for and check the checkbox next to it. You can select multiple projects at once.
- From the Role dropdown, choose the new permission level you'd like to assign to the users you selected in step 2, for each project you selected in step 4.
NOTE: You will not be able to change the role for the only Admin in an organization. - To remove a user's permissions, click Remove. Doing so will remove the user from the organization and eliminate all access provisions.
Project-level permissions
With project-level permissions, a user can have a different role for each project within an organization. This enables multiple teams in your company to operate autonomously and manage their own datasets. For example, a user may have Manager-level permission in one project, but Viewer-level permission in another. Users without access to a project cannot view any content that belongs in that project.
NOTE: Project-level permissions are available to customers on an Enterprise plan only.
When viewing all members of your organization, members will either be listed as User or Admin. If you are an Admin or Manager of a project in the organization, you can view and modify an individual member's role per project by clicking the checkbox next to the member's name and selecting "Manage Project Access". Managers will only be able to modify a user's role for the project where they are a manager.
Please reach out to your Customer Success Manager to enable project-level permissions as this is not enabled by default.
Permission groups
Also available exclusively to customers on an Enterprise plan, permission groups allow you to manage Amplitude user permissions at scale. You can add multiple users to a group and quickly assign them sets of permissions, allowing you to easily provision and manage your Amplitude organization.
For example, create groups of users like "Marketing Team" or "Payments Team" and assign project permissions to them in bulk. This allows you to control different groupings of users rather than managing each individual user's permissions.
Learn more about permission groups in Amplitude. Please reach out to your Customer Success Manager to enable project-level permissions.