Skip to content

What Google Tag Manager access do I need to publish changes live?

Last updated · roles checked against Google Tag Manager help

The short answer

Ask for Publish on the container. Only Publish pushes versions live; Approve can create versions but not publish.

What to ask for

Ask for
Publish (container permission) User access
Minimum safe access
Publish on the one container; still User, not Administrator, at account level.
Client needs
Administrator on the Tag Manager account.

Ask for Publish (container permission) and nothing broader. The smallest role that does the job is easier for the client to approve, easier to audit later, and simpler to remove when the work ends. If the scope of work grows, ask again for the larger role rather than requesting it up front.

What the client clicks

Send these steps to the person who holds administrator on the tag manager account. Tick them off as you go.

Google Tag Manager: Publish container changes0 / 4

What breaks if the role is wrong

  • Too lowEdit or Approve: your workspace changes sit unpublished.
  • GotchaPublish permission on GTM can also be used to verify Search Console ownership; agree on that when offboarding.

Copy this access request

Fill in the blanks and paste it into your email to the client. Nothing you type leaves this page.

Sources

Last updated

Skip the back-and-forth. Send one AuthHub link.

One branded link walks each client through official invites on 15+ platforms. $29/$79/$149 a month for 5/20/50 active clients.

Start free