Before You Hire a Houston Marketing Agency: Who Controls Your Google Accounts?

Before you hire a Houston marketing agency, ask to look at the accounts behind the proposal together. A dashboard or monthly report does not answer a basic question: can your business access and administer the underlying Google accounts without depending on that provider?

Our recommendation is to settle account access before work begins and write down the handoff plan. That does not mean withholding every permission an agency needs. It means agreeing on the work, the access required, and who remains responsible when the engagement ends.

Google uses different roles in Business Profile, Analytics, and Search Console. An "owner" in one product is not the same as an Administrator in another. This guide concerns platform permissions, not legal ownership or a guarantee that an account can be recovered.

Google Business Profile: check the primary owner

A Business Profile can have multiple owners but only one primary owner. Owners can add and remove users. Managers can handle daily work such as editing information and responding to reviews, but cannot add or remove users or remove the profile. See Google's Business Profile owner and manager roles [1].

Ask the provider to show you which identity is the primary owner, which other owners exist, and which role your own business-controlled identity holds. Verify your access by signing in yourself; a screenshot sent by someone else is not a substitute.

We recommend keeping primary-owner responsibility with an appropriate person in the business and asking whether manager access covers the provider's daily work. Any broader access should have a stated reason. Google says each person should use their own Google Account to manage a profile without sharing a password. See Google's separate-account guidance [1].

Google Analytics: record both the role and its scope

"You have Analytics access" is incomplete. Google permits access at the account or property level. Account-level access extends to all properties in that account with the same permissions; property-level access applies to that property. Permissions inherited from a higher level cannot be reduced at the property level. See Google's Analytics access and inheritance guidance [2].

Ask to identify the account and property for your website, then review your role and the provider's role at both levels. Record whether access is granted there or inherited. Do not accept an account name alone as proof that everyone is looking at the correct property.

Google requires the Administrator role at the relevant account or property level to add or modify users there. See Google's user-management requirements [2]. Our recommendation is to identify the responsible administrator and choose provider permissions around the agreed work, rather than grant account-wide administration by default.

Search Console: separate ownership verification from user access

Search Console distinguishes verified owners, who prove ownership using a verification token, from delegated owners, who receive ownership status without their own verification token. Both owner types have the same permissions. Full users can view all data and take some actions; restricted users have limited viewing access. See Google's Search Console permission definitions [3].

Ask which property covers your site, who the verified owners are, and what verification method supports the business's access. We recommend recording the method and the responsible person, not the token itself.

Removing an owner from the user list does not delete their verification tokens; remaining tokens can allow them to verify ownership again. Google also warns that removing a token can affect other services that use it. See Google's ownership-token cautions [3]. Do not treat provider offboarding as a bulk deletion exercise. Have the responsible administrator review dependencies and Google's procedure before making changes.

A short account-control and handoff worksheet

Use this recommended worksheet privately. Leave passwords, recovery codes, verification tokens, customer records, and screenshots containing personal information out of it. Do not paste account details into a public contact form.

1. Business Profile: profile name or public URL: ____; business-controlled primary owner and your role: ____; provider role: ____; person authorized to manage users: ____.
2. Analytics: account and property identifiers: ____; your role and scope: ____; provider role and scope: ____; inherited access: ____; responsible administrator: ____.
3. Search Console: property: ____; business-controlled verified owner and verification method: ____; your role: ____; provider's verified-owner, delegated-owner, full-user, or restricted-user status: ____; responsible owner: ____.
4. For each product: date you checked your own access: ____; evidence checked without copying sensitive data: ____; unresolved access question and person responsible: ____.
5. Handoff agreement: what access needs review, who will coordinate it, when your business will verify continued access, and what documentation the provider will supply: ____.

A hypothetical entry might say, "Analytics: provider access is inherited from the account; administrator to explain scope before approval." An unanswered question belongs on the worksheet, not behind an assumption that access is settled.

Bring the questions to your consultation

Ask: "Can I see the user list? What access do you need for this scope? What remains under my control when the engagement ends?" Verify your own access before approving a handoff or removing a provider. If you cannot verify it, pause and agree on a resolution plan rather than deleting unfamiliar users or tokens.

To discuss your marketing scope with BayouEdge, call James at 832-338-2926, send a message before your consultation, or review the published pricing. Bring your business goal and access questions, not credentials or customer data.