A marketing manager needs to grant a colleague access to their Google Analytics property. The colleague's responsibility is to build custom reports in the Explore workspace, but they shouldn't have permission to manage other users or alter property-level settings. Which user role should the manager assign to this colleague?

The colleague needs the Analyst role. Analyst sits between Viewer and Editor: it carries everything a Viewer can do — see reports and data — plus the ability to create, edit and share assets such as explorations, comparisons and segments. What it does not include is the ability to change the property's configuration, so the colleague cannot alter data streams, key events, attribution settings or other admin-level controls. That is exactly the balance the question describes. Assigning roles this way is standard good practice: give people the access their work requires and no more, so analysts can build the analysis they need without an accidental settings change affecting data collection for everyone. Editor and Administrator both include configuration rights, and Administrator additionally manages user access.