1. Permissions required in Google Analytics
A. GA4 property access (user-level)
The Google account used during the RevSure “Connect” flow must have access to the target GA4 property:
Requirement | Details |
|---|---|
Minimum GA4 role | Viewer (read-only) |
Recommended | Viewer or Analyst — no Editor or Admin required |
Property ID | Required during setup (numeric ID from GA4 Admin → Property Settings, without the p prefix) |
RevSure only reads aggregated analytics data. It does not modify GA4 configuration, tags, or events.
B. OAuth API scopes (shown on Google consent screen)
When the user clicks Connect in RevSure, Google requests these scopes:
Scope | Purpose | Access level |
|---|---|---|
analytics.readonly | Read GA4 reports and metrics | Read-only |
profile | Identify the connecting user | Basic profile |
Store which account authorized the connection | Basic profile |
RevSure does not request write, edit, or admin scopes for Google Analytics.
Reference: RevSure Google API Disclosure
C. Data RevSure reads from GA4 (examples)
Aggregated metrics only, such as:
Page path, page title, page views, sessions, users
Traffic source / medium / campaign
UTM parameters (utm_source, utm_medium, utm_campaign, etc.)
Geographic dimensions (city, region, country)
Event counts and standard engagement metrics
No personal end-user PII is collected from GA4 beyond what Google exposes in standard aggregated reports.
2. OAuth Client ID for RevSure
Client Id
181166403802-57egfftnalsjv36q25rmvdt2r4vl857e.apps.googleusercontent.com
Who owns the OAuth app?
RevSure registers and operates the OAuth 2.0 application with Google. Customer does not create its own OAuth app for this integration.
OAuth redirect URI (for IT allowlisting)
RevSure’s OAuth callback endpoint follows this pattern:
https://gw.revsure.cloud/data-hub/v1/oauth/callback
Confirm the exact tenant URL with your RevSure CSM (typically your RevSure app domain).
3. Setup steps (business user + IT)
Step | Owner | Action |
|---|---|---|
1 | IT | Obtain RevSure OAuth Client ID from RevSure Support/CSM |
2 | IT | If required, allowlist RevSure’s OAuth app in Google Workspace API controls |
3 | Marketing / Web | |
4 | Marketing / Web | Ensure the connecting user has Viewer (or higher) on that GA4 property |
5 | Marketing / Web | In RevSure Data Hub → Add Data Source → Google Analytics |
6 | Marketing / Web | Enter Property ID, sync start date, and sync frequency → click Connect |
7 | Marketing / Web | Complete Google SSO and approve the consent screen |
8 | Marketing / Web | Confirm mapping in RevSure |
Setup guide: RevSure Google Analytics Integration Guide
4. Security and compliance notes (for IT review)
Authentication: Standard Google OAuth 2.0 with offline refresh tokens
Access model: Read-only; no write or modification scopes
Data handling: Compliant with Google API Services User Data Policy, including Limited Use requirements
Revocation: Users can revoke access via RevSure (disconnect integration) or via Google Account permissions
Certifications: RevSure maintains SOC 2 Type II, ISO 27001, and related controls — see security.revsure.ai
Full disclosure: RevSure Google API Disclosure