Key facts
- Google Ads, Google Analytics, Google Search Console, and Google Business Profile all use their own account-level user permission systems, letting you add an agency as a user without transferring ownership of the account itself.
- Domain registration and hosting account ownership are separate from website content access, so an agency can be given admin access to manage a website's content without ever being made the registrant of the domain.
- Google Ads specifically supports linking a client's account to an agency's manager account for management access, which keeps the underlying account, and its history, registered to the client rather than the agency.
- Access permission levels typically range from view-only to full admin, so the appropriate level for an agency depends on what they actually need to do, not a default of full admin for every platform.
- Revoking platform-level user access, once properly set up this way, is something the client can do independently at any time, without needing the agency's cooperation.
The Core Principle: Link Access, Don't Transfer Ownership
The principle underneath every specific example here is simple: link access, don't transfer ownership. It matters because it determines what you keep if the relationship ever ends.
This applies across the board. The advertising account, the analytics dashboard, the search visibility reporting tool, and the business listing all let an owner add a user or manager without transferring the underlying account itself.
This one distinction determines almost everything else worth knowing about setting up a new agency relationship correctly.
What to Grant on Each Platform, Specifically
For Google Ads, link through their manager account rather than letting them build campaigns inside a new account they create and control.
For Analytics and Search Console, add the agency as a user at whatever permission level their actual work requires, from view-only up to edit access.
For Google Business Profile, add them as a manager rather than as the primary owner. For your website, grant admin or staging login access, not domain registrar or hosting account ownership.
What to Never Hand Over, Regardless of How It's Framed
Never hand over your domain registrar login or registrant status, your hosting account ownership, or the master email account tied to your business.
The risk here is plain: if you can't independently move your domain or log into your hosting, you don't fully control your own website, regardless of how good the working relationship currently feels.
A legitimate agency has no real operational need for full ownership of any of these, only access to work within them.
If Access Was Already Set Up the Wrong Way
This is fixable in most cases, though it may take some coordination, especially where domain or hosting ownership is involved.
Prioritize domain and hosting access first, since those carry the most risk if the relationship sours before they're corrected.
Treat this as a near-term priority rather than something to defer indefinitely, since the risk sits there quietly until it's actually addressed.
Related questions
No. The advertising platform, the site analytics tool, the search performance dashboard, and the business listing manager each let you add a collaborator at an appropriate permission level of their own, without ever sharing your actual login credentials. Sharing a password directly means you lose the ability to track or independently revoke access later, and you can't tell what changed or when.
There's rarely a legitimate operational reason for this, and it puts you at real risk if the relationship ends. Ask them to register it in your name and your own registrar account instead, with them managing DNS settings through access you grant, not through ownership they hold. Resistance to a plain, reasonable request like this is worth weighing heavily before you commit further.
It depends on the actual work involved. Content updates and SEO work generally need less than full admin, sometimes an editor-level role is enough, while technical changes may genuinely require more. Ask what specific access level the work requires and grant that, rather than defaulting to full admin for convenience.
It's reasonable for them to need access to manage the website within hosting, but that access should come through a login you control and can revoke, not through you handing over your actual hosting account ownership or master credentials. The distinction matters even though the day-to-day access can look similar.
Confirm you already control your own domain registration and hosting account independently, since those are the pieces you should never hand over. Then grant platform-level access, Ads, Analytics, Search Console, Google Business Profile, website, at the specific level each task requires, and keep a record of what you granted and where.
Want a second opinion on your situation?
Get a free, no-obligation proposal. We’ll look at your site and your market and tell you honestly what we’d do — and what we wouldn’t.
Get your free proposal