Los artículos de ayuda existen en alemán e inglés. Aquí los lees en inglés.
Usuarios, roles y tarifas
Which roles exist and what may they do?
There are three roles inside a tenant (Admin, Analysis and Read only) plus two platform-side roles. Every API route checks the permission server-side; hiding things in the interface is only the display of that.
Who is allowed to do what in the portal?
| Role | May |
|---|---|
| Admin | everything in the tenant: users, websites, keys, settings (including whether support may access it), privacy requests, change log |
| Analysis | report, export, import, maintain campaigns, tracking elements and conversions, run diagnostics, send test events |
| Read only | report, without changing anything |
| Support | read-only, only with an active, justified support grant for this tenant, and only while the tenant allows support access in its settings |
| Platform administration | additionally platform-wide administration; no access to identifiers from privacy requests |
The interface shows only what the role can actually do: “Privacy”, “Change log” and the API key form are visible to the Admin role only, and the export buttons are missing for Read only. Anyone who may not manage users sees names and roles in the user list, but not the other people’s email addresses.
Note
Only the Admin role may handle privacy requests. That is deliberate: access and deletion are acts with legal effect, not part of daily reporting.
Plan, invoices and payment details
All three roles see “Plan & usage”: plan, allowance and usage. Only the Admin role may book, switch the plan, change the invoice language and open “Invoices and payment details”, where invoices, payment method and billing address live. There is no separate role for accounting: whoever collects invoices needs the Admin role, or a person with that role downloads them and passes them on.
Change a role, suspend access, remove
- You change a role under “Team & roles” in the row’s selection field. The field shows the new role only once it is saved; if saving fails, it still shows the role that applies, and the message says so.
- The new role applies from the person’s next request; no new sign-in is needed.
- You cannot take the Admin role away from yourself, suspend yourself or remove yourself. Another person with that role does it.
- A suspension applies to the person’s whole user account, not just this tenant, and ends all their sessions. That is why you can only suspend someone who belongs exclusively to tenants you administer. If the person belongs elsewhere too, remove them from your tenant. That only takes effect here.
- Role changes, suspension, reinstatement and removal appear in the change log.
Revisado por última vez el 14 oct 2026
En el portal del cliente
También se pregunta
- Permissions
- Who can manage users?
- Restrict rights
- Read-only access
- Why can I no longer see some areas?
- Why are email addresses missing from the user list?
- How do I change someone’s role?
- How do I suspend someone’s access?
- Why can I not suspend this person?
- Can accounting see invoices without being an admin?
- Who can book a plan?
- Who can see invoices?
Artículos relacionados
- How do I invite more users?
How do colleagues get access?
Under “Team & roles” you invite people by email and assign the role at the same time. The invitation leads into the same tenant; no second account is created. How many people you can add depends on the plan; on the free Start plan it is just you.
- Can support see my data?
Who at Metrunio has access to my account?
Only while “Allow support access” is switched on in your settings; it is on by default. Support can then read and run diagnostics with a time-limited, justified grant, but cannot change data. If you switch it off, any running access ends immediately and no new one is possible.
- Who changed what?
How do I check who changed a setting?
The change log records changes with person, time and action, plus the security of user accounts, for example who switched off two-step verification or suspended someone’s access. It is visible to the Admin role; each entry is kept for 180 days.