Add an option for Tag Manager permissions such as "No Access" or "Read only"

[atom-box]

A user has requested to make a user with the following:

• Custom Reports editing: Yes
• Tag Manager editing: No

This could take the form of an X in this view, near the (2), allowing us to rescind the [MTM:Write capability] from a user who otherwise has [Write role].

"We want users to have write access so they can create custom reports but we do not want them to have edit capability on Tag manager."

[Stan-vw]

Thanks for the suggestion! We have looked at it with the product team and see some pros and cons. For now, we will wait for more users to provide their input on this before we make a decision to implement it.

Rationale: right now we have 1 request and we see value in it, but it’s reasonable to expect many users would be negatively impacted by implementing this (either by the increased configuration complexity in the suggested solution, or by not having users with Write access to be able to access the Tag manager if we'd switch the relevant access rights to Admin).

[MatomoForumNotifications]

This issue has been mentioned on Matomo forums. There might be relevant details there:

https://forum.matomo.org/t/grants-only-for-super-users/47565/4