Granular access control for segments (Site-specific and User Group-specific visibility)

Hi Matomo Team and Community,

I’ve been working with a large Matomo instance (200+ related websites) and have encountered a limitation regarding the scalability of segments. Currently, the visibility for segments is binary: either “Only me” or “All users”, and “Only this website” or “All websites”.

In a professional environment with different teams (e.g., Marketing, Sales, IT) and many sub-projects, this leads to two main issues:

  1. User Clutter: If I want to share a segment with my team (e.g., 5 people), I have to make it “Global”. This clutters the UI for all other users who don’t need this specific segment.

    • Suggestion: Add a “User Group” visibility option (similar to the Group Permissions plugin logic). Even a copy-to feature as for Dashboards would already be helpful.
  2. Site Selection: Often, a segment is relevant for a specific cluster of websites (e.g., 5 out of 100). Making it “Global” for all 100 sites is overkill, while creating it manually for each site is inefficient.

    • Suggestion: Replace the “One vs. All” toggle with a multi-select option or checkboxes to assign a segment to specific website IDs.

Why this matters: As Matomo grows within an organization, the current “All or One” logic makes the interface messy and harder to manage for admins. Granular control would significantly improve the user experience for large-scale setups.

I would love to hear if others are facing the same issue or if there are plans to refine the segment management UI!

1 Like

This is a very valid scalability concern, especially for enterprise-style Matomo deployments with many teams and site clusters.

The current “Only me” vs “All users” and “One site” vs “All sites” model works fine for smaller setups, but once you start managing hundreds of websites, it becomes difficult to keep the segment UI clean and relevant for different departments.

The proposed “User Group” visibility option makes a lot of sense, particularly since similar permission logic already exists elsewhere in Matomo. A selective site assignment model (multi-select instead of binary scope) would also greatly reduce duplication and admin overhead.

Honestly, this feels less like a niche feature request and more like an important usability improvement for larger organizations using Matomo at scale.

1 Like