Currently, it is not possible to manage user rights for Adobe Analytics in a truly modular way. I am speaking about Product Profiles in Admin Console.
I would like to grant access to Analytics based on two main aspects:
User skill level and role: Beginner / Intermediate / Advanced
This defines the Metrics, Dimension and Tools the user has access
Organizational: Company division
This defines the Report Suite(s) the user has access to
I would create different Product Profiles for each entity and combine these. E.g. Product Profile "Beginner" has access to a very limited set of Dimensions and Metrics and only to Reports & Analytics, but not Workspace. Product Profile "Japan" has only access to the Japan Report Suite. A beginner in the OU Japan would get both these Product Profiles assigned.
In the Admin console, there are five areas where permissions are defined:
Report Suite Tools
Reading this, I understand it should be possible to grant access to Report Suites independently:
"A user could belong to multiple product profiles, each conferring different licenses to the user. A user's final eligibility is the union of all licenses conferred by each Product Profile to that user."
Yet, it is not. That's why I am writing this 😉 Adobe Engineering confirmed that permission to Report Suites must always be set in the same Product Profile where permission to Dimensions and Metrics is set.
I consider this a lack of functionality, especially for the Enterprise segment Adobe prides itself to cater to. Large companies with various report suites want to restrict access to those while metrics and dimensions would be the same for a specific user group (like the "Beginners").
The only workaround I can think of is to create product profiles "Webanalytics Beginner" for each of the countries with identical permissions except for the report suite. What if there are 30 countries and I want to grant access to a new dimension to "Webanalytics Beginners"? You would have to edit 30 (almost identical) profiles. Not efficient.