# Security and governance

## Signing in

You sign in to Markalit Analytics with your Markalit account.
There is no separate password: choosing **Analytics** in Markalit's menu signs you in, and two-step verification on your Markalit account protects both.

## Roles

Your role in Markalit sets your role in Analytics, every time you sign in:

| Markalit role | In Analytics, you can |
| --- | --- |
| Admin | Explore, build and save charts and dashboards, create spaces, and manage the spaces you create |
| Member | Explore, build charts, comment and export, and build in the spaces you can edit |
| Viewer | Open dashboards and saved charts, read comments and export results |

To change someone's access, change their role in Markalit, under **Settings**, then **Users**.

## Your data stays yours

Each organisation's Analytics reads only that organisation's events.
Nobody in your organisation can write their own SQL against the warehouse, so every query goes through the explores and their definitions.

## Bots and consent

Bot traffic, and events from visitors who did not consent, are left out of every explore.