Runbook: Google Analytics Permission Issue
| Service | Webku x Tripla Page |
|---|---|
| Owner Team slack handle | @bnl-dev-bali |
| Team's Slack Channel | #bnl-teams-b |
Table of Contents
- [[#Important Links]]
- [[#1. Triage]]
- [[#2. Decision Point]]
- [[#3. False Alarm]]
- [[#4. True Incident]]
- [[#4.1. Recover the System]]
- [[#4.2. Clean up]]
Important Links
| Alert | [Sentry Issue Link – AxiosError Network Error] |
|---|---|
| Logs | [Browser DevTools Network Tab] |
| Dashboard | Configuration → Integration → Google Analytics Report |
| Google Analytics Admin | https://analytics.google.com |
1. Triage
Goal: Confirm whether the issue is caused by Google Analytics permission misconfiguration.
- Open the Sentry issue.
- Confirm error message:
AxiosError: Network Error
- Open browser DevTools → Network tab.
- Locate request to Google Analytics API.
- Check response status.
- Is response
403 Forbidden? - Was Property ID recently changed in:
Configuration → Integration → Google Analytics Report
- Confirm whether service account email has access:
analytic-report@bnl-webku.iam.gserviceaccount.com
2. Decision Point
-
IF API response is
403and service account lacks permission...- ➡️ Go to: [[#4. True Incident]]
-
IF API response is
200and report loads normally...- ➡️ Go to: [[#3. False Alarm]]
3. False Alarm
- Confirm analytics report loads.
- Confirm API returns
200 OK. - Monitor Sentry for recurrence (15 minutes).
Post in Slack:
Sentry alert reviewed. No active permission issue detected.
Monitoring for recurrence.
4. True Incident
Impact:
- Google Analytics report does not load.
- Users cannot view analytics inside Webku dashboard.
4.1. Recover the System
Diagnostic Steps
- Confirm 403 response.
- Confirm incorrect or changed Property ID.
- Check Google Analytics → Property Access Management.
Remediation Plan
- Grant Viewer access to:
analytic-report@bnl-webku.iam.gserviceaccount.com
- Role must be:
Viewer
- Save changes.
- Refresh Webku dashboard.
Verification
- API response returns
200. - Analytics report loads successfully.
- No new AxiosError logs in Sentry.
Reference: How to Connect Google Analytics to Webku Dashboard
4.2. Clean up
- Confirm no analytics configuration corruption.
- Notify client if misconfiguration was client-triggered.
- Monitor Sentry for 30 minutes.
- Document incident if repeated.