Which role to ask for, by task
One row per job. Ask for the role in the second column and nothing broader: the smallest role that does the job is easier for the client to approve, easier to audit, and simpler to remove when the work ends.
Role by taskscroll →
| Product | Task | Ask for | Access type |
|---|---|---|---|
| Google Ads | View reports | Read-only | User access |
| Google Analytics 4 | Set up key events and audiences | Marketer | User access |
| Google Analytics 4 | View reports | Viewer | User access |
| Google Tag Manager | Publish container changes | Publish (container permission) | User access |
| Google Search Console | Submit sitemaps and request indexing (full SEO work) | Full user | User access |
| Google Search Console | View performance reports | Restricted user | User access |
| Google Business Profile | Manage the listing, posts and reviews | Manager | User access |
What the client needs before starting
Only someone with these rights can add the agency. If your contact doesn't have them, ask who does first.
- Google AdsAdmin access on the Google Ads account.
- Google Analytics 4Administrator on the GA4 property.
- Google Analytics 4Administrator on the GA4 account or property.
- Google Tag ManagerAdministrator on the Tag Manager account.
- Google Search ConsoleOwner (verified or delegated) of the Search Console property.
- Google Search ConsoleOwner of the Search Console property.
- Google Business ProfileOwner of the Business Profile.
Google products
Google Ads
- View reports→ Read-only
Google Analytics 4
- Set up key events and audiences→ Marketer
- View reports→ Viewer
Google Tag Manager
- Publish container changes→ Publish (container permission)
Google Search Console
- Submit sitemaps and request indexing (full SEO work)→ Full user
- View performance reports→ Restricted user
Copy this access request
One message for every role above. Fill in the blanks and paste it into your email to the client. Nothing you type leaves this page.
Sources
- https://support.google.com/google-ads/answer/9978556 · checked Oct 13, 2026
- https://support.google.com/analytics/answer/9305587 · checked Oct 13, 2026
- https://support.google.com/tagmanager/answer/6107011 · checked Oct 13, 2026
- https://support.google.com/webmasters/answer/7687615 · checked Oct 13, 2026
- https://support.google.com/business/answer/3403100 · checked Oct 13, 2026
Last updated
Skip the back-and-forth: send your client one AuthHub link.
One branded link walks each client through official invites on 15+ platforms. $29/$79/$149 for 5/20/50 active clients.