matomo-org / matomo

Empowering People Ethically with the leading open source alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. Liberating Web Analytics. Star us on Github? +1. And we love Pull Requests!
https://matomo.org/
GNU General Public License v3.0
19.69k stars 2.62k forks source link

Add option for User Groups #18681

Open Starker3 opened 2 years ago

Starker3 commented 2 years ago

We have a request for a "Users Group" feature to be added to Matomo.

This can be useful for a number of different reasons:

  1. It allows easier permissions management for Matomo instances that have a large number of websites. The current permissions setup for Matomo requires the permissions to be set for a user for every individual website or to give a certain level of access to all websites at once. Having an option to add a user to a group that has the permissions already defined can make this process a lot easier

  2. Groups could be used when creating a new segment to share the segment with a specific set of users. Currently the only option for Segments is the segment creator or all users. That means that when you have different groups that all have access to a site in Matomo that they need to search through all of the segments they have access to and look for the ones that are relevant to them. For example, you could have Marketing, Development, Customer Experience teams, etc. that would all be interested in different segments depending on their needs.

I'm certain there are other benefits as well to having user groups.

shoezen commented 2 years ago

I would really like to have this User Group too. I miss that you can't create reports were multiple employers/users can acces the settings of this report. If this employee is ill, we can't access the reports settings of our customers websites. A general account is against our policy. We need to see who changes what etc. according tot our Information security policy (ISO 27001). If reports were to be accessible for a certain group, that would be really helpful. And we can help our customers faster because we don't have to wait until this 1 user is back from holiday or illness. Thank you!

Starker3 commented 2 years ago

We got another request for this feature today, together with a similar request to have this kind of functionality in the other login plugins (SAML, LDAP)

skitoxe commented 1 year ago

Hi!

Any updates on when this feature will be implemented? For our company's use case this would really help out a lot. The current state of permission management leaves much to be desired when you have several larger sites and many editors accessing Matomo.

skitoxe commented 1 year ago

Hi again! Any info in regards to what For prioritization means in time? Do we have any idea on when this feature might get implemented.

Tof-le-Chauve commented 1 year ago

Hello everyone, I have over 1700 websites on Matomo. The user group option is seriously lacking for effective permission management. With every new site, I'm forced to authorize each site for each user. This is almost impossible with such a large number of sites. If we could create a group of sites and authorize this group with the correct rights, we would only need to create the sites in the right group and we're done. This feature has been sorely missed for several years. Do you think it will ever be developed? Thanks in advance. Chris

Starker3 commented 1 year ago

@Tof-le-Chauve There is this third party plugin: https://plugins.matomo.org/GroupPermissions But it seems to maybe lack permission settings for Tag Manager specifically, so it might only be able to set Read/Write/Admin only.

Tof-le-Chauve commented 1 year ago

@Starker3 Thank you for the quick response. Yes, I saw this plugin, do you use it? The author provides very little explanation.

Thanks in advance. Chris

Normandygirl commented 1 year ago

Hi, we had a client ask for this on a call today. For example, client said it would be great to have a "marketing" group with specific access permission.

michalkleiner commented 1 year ago

@Stan-vw this is relevant to the OKR discussion we had in sprint planning around the cloud vs core and the user management/permissions model.