Hi,
Is there a way to only give that ability to my admin account?
Yes there is, and I said it before. Let your customer have his own GA account and authorize the plugin with its account. You can use the User Management feature from Google Analytics to share the targeted property with your client or vice-versa (if you still need access to that View for whatever reason).
I understand that access is given to the entire GA account, so the application would essentially be able to see my 25+ properties.
You have an option to lock the plugin to a single view, see the documentation for details.
When I hand off this site to the client with their own admin-level account, what is stopping them from editing the property and viewing data from my other entries?
The authorization is given with a read-only scope, so there’s no way for a client to edit your account. Anyway, my advice is to use the GA User Management feature.
Thank you for your response. See my follow up below for some clarification.
Yes there is, and I said it before. Let your customer have his own GA account and authorize the plugin with its account. You can use the User Management feature from Google Analytics to share the targeted property with your client or vice-versa (if you still need access to that View for whatever reason).
By “his own GA account”, do you mean that I create a separate GA account outside of my main GA account? If so, my goal is to manage all properties under one account of mine and just provide property-level access to each client’s email address within groups.
If, on the other hand, you mean to create a separate top-level account, would it work with how I have mine set up:
My Main GA Account (my proposed plan going forward)
– Client Group A
– *Client 1’s Property*
– *Client 2’s Property*
– …
– *Client 50’s Property*
– Client Group B
– *Client 51’s Property*
– etc.
My original setup was not to group them, but rather give each client their own top-level account. I want to move away from this setup:
My Main GA Account (my current setup)
– Client 1’s Account
– *Client 1’s Property*
– Client 2’s Account
– *Client 2’s Property*
– etc.
Hope this is not too confusing. Ultimately, I’d like to keep everything in my main account but maybe my proposed plan won’t work with how Analytics is intended to function for clients.
Sorry for the confusion I was talking about his own Google Account! Also see: https://support.google.com/analytics/topic/6014099?hl=en&ref_topic=1726911
If you’re trying to authorize all your client’s sites from your Google Account (a single account), you won’t be able to authorize more than 25. See https://developers.google.com/analytics/devguides/reporting/core/v2/gdataAuthentication#invalid-grant.
Ah! Thank you for your thorough explanation.
