Team and roles

Invite people in Admin → Team → Invite. Each member has a role in the organization; an admin can override it for a specific site (higher, lower, or no access).

Role	Can
Viewer	Read every report, template, realtime view and element catalog
Analyst	Everything a viewer can, plus save reports, dashboards, segments and annotations, and ask questions in plain English
Editor	Everything an analyst can, plus edit goals, funnels, channel rules, content groups and event mappings
Admin	Everything an editor can, plus site settings, consent, ingest keys, imports, members and roles, GDPR requests
Owner	Everything, including billing. An owner's access cannot be restricted per site.

The number of seats depends on your plan: Free 1, Growth 5, Pro 20, Scale unlimited. Sensitive actions (role changes, GDPR erasures, settings) are recorded in the audit log.

API keys for the public API and the MCP server are created per organization, with their own scopes.