Handoff Matomo/GA4 Read-Only Access to Auditors (No Tag Changes)

Why analytics access needs guardrails

Auditors need to inspect events, conversions, and attribution—not ship new tags. Keep change power with your team and give auditors read-only access.

GA4: access the safe way

1. Admin → Access management: add users with Viewer (or Analyst if they need to build explorations, but not edit settings).
2. Keep Editor & Admin limited to your core team.
3. Review links out-of-band before clicking invites. Habit guide: Verify Links Like a Pro.

Matomo: read-only pattern

1. Administration → Users: create or invite a user with view permission on the site(s) they must audit.
2. Keep write/admin roles for your analytics leads only.

Exports & samples (don’t leak data)

• Don’t email CSVs with raw user data. Deliver via a one-time, expiring link + separate access code. Basics: The Safe Way to Share Passwords.
• Share minimal samples first (synthetic or redacted). Redaction help: Redact Sensitive Info.

Change control (keep tags stable)

• All tracking/tag changes happen via your GTM approval flow. Guide: Grant Google Tag Manager Access Safely.
• Auditors get dashboards and read-only reports—no publishing rights.

Offboarding & retention

• Remove auditor accounts at engagement end and rotate any credentials they touched. Checklist: Employee Offboarding.
• Delete exports on schedule and log confirmations.

Useful external references

• GA4: Access management 🔗
• Matomo: Manage users & permissions 🔗

Related reading

Share Google Drive Folders Safely · Zero-Knowledge Sharing · One-Time Links vs. Encrypted Email

Bottom line

Read-only for auditors, gated changes for your team, and expiring links for any exports. That’s analytics without accidents.