Add option for User Groups

[Starker3]

We have a request for a "Users Group" feature to be added to Matomo.

This can be useful for a number of different reasons:

1. It allows easier permissions management for Matomo instances that have a large number of websites. The current permissions setup for Matomo requires the permissions to be set for a user for every individual website or to give a certain level of access to all websites at once.
   Having an option to add a user to a group that has the permissions already defined can make this process a lot easier

2. Groups could be used when creating a new segment to share the segment with a specific set of users. Currently the only option for Segments is the segment creator or all users. That means that when you have different groups that all have access to a site in Matomo that they need to search through all of the segments they have access to and look for the ones that are relevant to them. For example, you could have Marketing, Development, Customer Experience teams, etc. that would all be interested in different segments depending on their needs.

I'm certain there are other benefits as well to having user groups.

[shoezen]

I would really like to have this User Group too.
I miss that you can't create reports were multiple employers/users can acces the settings of this report. If this employee is ill, we can't access the reports settings of our customers websites. A general account is against our policy. We need to see who changes what etc. according tot our Information security policy (ISO 27001). If reports were to be accessible for a certain group, that would be really helpful. And we can help our customers faster because we don't have to wait until this 1 user is back from holiday or illness. Thank you!

[Starker3]

We got another request for this feature today, together with a similar request to have this kind of functionality in the other login plugins (SAML, LDAP)

[skitoxe]

Hi!

Any updates on when this feature will be implemented? For our company's use case this would really help out a lot. The current state of permission management leaves much to be desired when you have several larger sites and many editors accessing Matomo.

[skitoxe]

Hi again! Any info in regards to what For prioritization means in time? Do we have any idea on when this feature might get implemented.

[Tof-le-Chauve]

Hello everyone,
I have over 1700 websites on Matomo. The user group option is seriously lacking for effective permission management. With every new site, I'm forced to authorize each site for each user. This is almost impossible with such a large number of sites. If we could create a group of sites and authorize this group with the correct rights, we would only need to create the sites in the right group and we're done. This feature has been sorely missed for several years.
Do you think it will ever be developed?
Thanks in advance.
Chris

[Starker3]

@Tof-le-Chauve There is this third party plugin: https://plugins.matomo.org/GroupPermissions
But it seems to maybe lack permission settings for Tag Manager specifically, so it might only be able to set Read/Write/Admin only.

[Tof-le-Chauve]

@Starker3 Thank you for the quick response.
Yes, I saw this plugin, do you use it? The author provides very little explanation.

Thanks in advance.
Chris

[Normandygirl]

Hi, we had a client ask for this on a call today. For example, client said it would be great to have a "marketing" group with specific access permission.

[michalkleiner]

@Stan-vw this is relevant to the OKR discussion we had in sprint planning around the cloud vs core and the user management/permissions model.