GA4 User Admin tool
The GA4 User Admin tool is used to grant and remove users’ access to GA4 and BigQuery data.
Different variants of this tool are used to add users to different GA4 properties and BigQuery datasets.
How to use the tool
Accessing the tool
To access the tool(s) you will need to be signed into your GDS Google account and be a member of the ‘ga-user-admin’ Google Group. The app uses IAP to manage access.
Adding a user
Users added via the User Admin tool will not be automatically notified by Google so it is important to still send any welcome messaging. The standard message for GOV.UK users can be found on the welcome message page.
Issues and errors when adding a user
Sometimes the tool will fail to add a user. This is most commonly because they do not have a Google account. The user will need to set up a Google account with their work email address before they can be granted access to GA4 data.
If you continue to get errors when adding users, you can attempt to use Google Marketing Platform to add the user, and see what error message you receive in Marketing Platform. If you see an error message in Marketing Platform stating that the user does not satisy the organisation’s user policy, this is commonly related to the user not having associated their account with Google. This support article should help you deal with this issue.
User Admin tool variants
GOV.UK User Admin tool
The GOV.UK version of the tool adds a user to www.gov.uk GA4 production data as well as providing read access to GA4 datasets in BigQuery (as detailed in the access policy).
The tool is hosted here and is deployed from the GA4 Analytics project.
GA4 Blogs User Admin tool
The Blogs GA4 User Admin tool is used to add and delete users’ access to www.blog.gov.uk production Google Analytics data (the Google Analytics property only).
The tool is located here.