Skip to content

How to give agency access to Google Tag Manager

Last updated · every role links to a page checked against official help

The short answer

Ask for Publish (container permission) to publish container changes. Grant it on the one Google Tag Manager account or property the agency works in, nothing broader.

Which role to ask for, by task

One row per job. Ask for the role in the second column and nothing broader: the smallest role that does the job is easier for the client to approve, easier to audit, and simpler to remove when the work ends.

Role by taskscroll →
TaskAsk forAccess type
Publish container changesPublish (container permission)User access

What the client needs before starting

Only someone with these rights can add the agency. If your contact doesn't have them, ask who does first.

  • Google Tag ManagerAdministrator on the Tag Manager account.

Step-by-step pages for Google Tag Manager

Publish container changes

What the client clicks

The top-level clicks in Google Tag Manager. Each task page above has the exact role to pick at the last step.

  1. Open Tag Manager → Admin → User Management.
  2. Add or select the agency's email.
  3. Set container permission to Publish on the right container.
  4. Save.

What breaks if the role is wrong

  • Too low · Publish container changesEdit or Approve: your workspace changes sit unpublished.
  • Gotcha · Publish container changesPublish permission on GTM can also be used to verify Search Console ownership; agree on that when offboarding.

Copy this access request

One message for every Google Tag Manager role above. Fill in the blanks and paste it into your email to the client. Nothing you type leaves this page.

Sources

Last updated

Skip the back-and-forth: send your client one AuthHub link.

One branded link walks each client through official invites on 15+ platforms. $29/$79/$149 for 5/20/50 active clients.

Start free