Open navigation

About data source permissions and access requirements

Supermetrics needs your permission to extract the data for your reporting. Each of the data sources that we connect to has requirements that your account needs to meet before it can grant Supermetrics the right permissions.


Remember that you don't have to use Google or Microsoft account that you use with Supermetrics when you log in to a data source account. Log in to each data source with whichever account has the right access and permissions for the queries you want to run.


Review the table below to learn more about the account requirements for many of our data sources.



Data sourceRequirements
AdformThe connected account must have External API access. Learn how to enable Adform's external API.

It also needs the Advertiser or Agency user role as part of a Buyer Solution category in order to access and read client data.
Adobe Analytics &
Adobe Analytics 2.0

There are 2 ways to connect Adobe Analytics to Supermetrics. 


Connecting with OAuth requires an Adobe ID linked to Experience Cloud with web service access enabled. The account needs explicit access to report suites, reports, segments, and custom fields.

Connecting with a service account requires system administrator or developer access.


Learn more about both of these methods, including their benefits and limitations, in our Adobe authentication guide.

AdRollAn AdRoll account with Administrator or General user access. Learn how to add users to your account.
AhrefsAn Ahrefs account with Admin or Owner access. Learn about Ahrefs user roles.
Apple Search Ads

An Apple Search Ads account with API Read-only or API Account Manager permissions. Learn more about Apple Search Ads user roles.


You'll also need to generate an API client.

AwinYou'll need to generate and authenticate API credentials to connect.  
Bing Webmaster ToolsBing Webmaster Tools requires an API key.

Refer to Microsoft's documentation to learn how webmasters can create this key.
CallRailA CallRail account with Admin, Manager, or Reporting permissions, and an API key.
Capterra PPCThe Capterra account manager has to enable API access with an API key. Learn how to create these credentials.
Capterra Reviews

A Capterra product identifier is required for search. Learn how to find this identifier.

Clockify 

A Clockify account with Admin permissions, and an API key.

Criteo

Connecting to Criteo requires you to create an app and then adjust its permissions.

Follow these steps to create your app.

Facebook Ads

A Facebook account with Employee access and View Performance enabled, or an account with Ad Analyst access to an ad account. Learn more about Facebook user roles.


To access Lead data, you'll need a Lead Manager or Page Admin account. Agencies need Page Admin access, too. Learn more about access to Lead data.


If you're using the new Pages experience, you need Partial Access to the linked Facebook account.

Facebook Business ManagerA Facebook account with Finance Editor access. Learn more about Business Manager roles and permissions.
Facebook Political Ads

You need to have confirmed your identity with Facebook, and have a Facebook developer application. Learn more in our guide.

Facebook Insights

A Facebook account with either Administrator access to the connected Page, or if you're using Business Manager, Page Editor access to the Page.


If you're using the new Pages experience, you need Partial Access to the linked Facebook account.

Google AdsA Google Account with at least Read-only access to a Google Ads account or manager account.
Google Ad Manager

A Google Account with at least Trafficker access to the ad account.

Additionally, the administrator must enable API access.

Google AdSense

A Google AdSense account with Admin access.

Google AnalyticsA Google Account with at least Read & Analyze access at the Property and View levels.
Google Analytics 4A Google Account with at least Read & Analyze access at the Property and View levels.
Google BigQuery

BigQuery Data Viewer and BigQuery User access for the dataset, and BigQuery User access for the project.

Google Campaign Manager 360

A Google Account with a user role appropriate to the content the account needs to access


Some accounts may require API access. This must be enabled by a Google representative or campaign manager.

Google Display & Video 360A Google Account with Standard or Admin access.
Google My Business

A Google Account with Owner or Manager access.

Google Search Ads 360 A Google Account with at least Advertiser Manager or Agency Manager access.
Google Search ConsoleVerified site ownership with the role Verified Owner or Delegated Owner.
HubSpotA HubSpot account with Admin access.

For full access, Super Admin or Owner access. Learn more about HubSpot permissions.
Instagram InsightsAn Instagram Business Account (may also be called "professional account") or a Creator Account that uses Facebook authentication and is not restricted, age-limited, or private.


The account must be linked to an active Facebook Page, and the linked Facebook Page may need to be "claimed" before it can be properly connected.


Learn more about Instagram Insights permissions.

Instagram Public DataA Facebook account linked to an Instagram account (either a Business or Creator profile) with Manage Page access.
Klaviyo

A Klaviyo account with Admin, Owner, or Manager access, and an API key.


Learn more about Klaviyo permissions.

LinkedIn AdsA LinkedIn account with Viewer access to an ad account.

For creative-level granularity (ad content and metadata), the account needs Admin-level page access.

Learn more about LinkedIn Ads permissions.
LinkedIn Company PagesA LinkedIn account with Super Admin access.
MailchimpA Mailchimp account with Admin or Owner access.
Microsoft AdvertisingA Microsoft account with at least Advertiser campaign manager access to an ad account, and multifactor authentication enabled.
Omnisend

A store or website connected to your Omnisend account, and an API key.

Outbrain AmplifyAn account with API access. Contact your account manager or Outbrain to set this up.
Optimizely 

An Optimizely account with at least Administrator or Pro access to an ad account. 

Pardot

An account in a Salesforce instance that's linked to Pardot, and a Pardot business unit ID.


Learn more about connecting to Pardot.

Pinterest Ads A Pinterest account with at least Admin or Campaign access to an ad account.
Pinterest Organic


Authenticate using the actual Pinterest profile you want to report for. Business access accounts will not work.

SalesforceRead access to objects and fields. Supermetrics currently supports the following objects and fields under them: accounts, campaigns, contacts, leads, opportunities, tasks.

Salesforce permissions are highly customizable and will vary from instance to instance, you must contact your Salesforce system administrator for help connecting to Supermetrics.
Salesforce Marketing Cloud

A Pro, Corporate, or Enterprise-level Salesforce Marketing Cloud account.


Additionally, the user logging into the Salesforce Marketing Cloud account must have the Administrator or Marketing Cloud Administrator role. 

SearchmetricsAn account with the Administrator user role, and an API key and client secret.
Semrush AnalyticsA Semrush subscription and an API key.

Learn more about Semrush API subscriptions.
Semrush Projects

A Semrush subscription and an API key.

Learn more about Semrush API subscriptions.

Snapchat MarketingA Snapchat account with at least Account admin or Campaign manager access to an ad account.

Snowflake    




OAuth connections require an admin account that can generate a client ID and client secret. In addition, you'll need the hostname, warehouse name, database name, and database schema.

Database connections require a username and password in addition to the above.

Learn more about OAuth in Snowflake's documentation.

Shopify

A Shopify Store Owner or Staff account, and Supermetrics selected under the Apps and channels section of the user's permissions page in Shopify.

Spotify AdsA Spotify ad account.
StackAdaptA StackAdapt API key. Learn more about generating and using your API key.
StripeA Stripe account with the Administrator role.
TaboolaA Taboola account with at least Account Manager access. 
The Trade DeskAccess to The Trade Desk API, and an account with Partner-level access.

Learn more about connecting The Trade Desk.
TikTok Ads A TikTok Ads account with at least Ad account analyst access. User roles with higher permissions — including Owner, Admin, and Operator — will also work.
Twitter AdsA Twitter account with at least Campaign analyst access to an ad account.

Note that some dimensions require Ad manager access, or higher.
Twitter Premium

A Twitter account.

Note that multi-account access isn't supported, so each connected account must be authenticated individually.
Yahoo Native Ads

A Yahoo Native Ads account with at least Admin or Campaign manager access. Learn how to assign user roles.

Yahoo DSPAPI access, and a client ID and client secret.

Learn how to set up Yahoo DSP API access.
Yandex.DirectA Yandex.Direct account with at least Chief Representative or Representative access.

Learn more about Yandex.Direct user roles.
Yandex.Metrica

A Yandex.Metrica account with a tag installed, and the Chief Representative or Representative role.

YouTubeBrand accounts need Manager access to connect to Supermetrics.

All other accounts need the user to be the channel's Owner.

Learn more about brand and standard accounts.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.