See below for user roles and descriptions.
Full control of Analytics. Can manage users (add/delete users, assign any role or data restriction). Can grant full permissions to any user, including themselves, for any account or property for which they have this role.
Editor Role — *Recommended
Full control of settings at the property level. Cannot manage users.
Can create, edit, and delete audiences, conversions, attribution models, events, and lookback windows.
Can create, edit, and delete certain property assets. Can collaborate on shared assets.
Can see settings and data; can change which data appears in reports (e.g., add comparisons, add a secondary dimension); can see shared assets via the user interface or the APIs. Cannot collaborate on shared assets. For example, shared explorations can be viewed, but not edited, by those with a Viewer role.