When you hire an agency or freelancer to manage your Google Ads, one of the first things they will need is access to your account. How you grant that access matters more than most people realise. Do it wrong and you could lose control of your own account, your data, or even your billing. Do it right and you maintain full ownership while giving your agency everything they need to do their job.
This guide explains the correct way to share Google Ads access, the different methods available, what each access level means, and the red flags to watch out for.
Why sharing access correctly matters
Your Google Ads account contains valuable data - keyword performance history, conversion data, audience lists, and campaign settings that have been refined over time. It also controls your advertising spend. Sharing access the wrong way can lead to:
- Loss of account ownership: If an agency creates the account under their own email, they own it - not you. If you part ways, they can take your account, your data, and your campaign history with them.
- Billing issues: Giving admin access to the wrong person means they can change your billing settings, payment methods, or even your billing address.
- Data loss: Users with the wrong access level could accidentally (or deliberately) delete campaigns, audiences, or conversion data.
- Security risks: Sharing your Google account login credentials (username and password) rather than granting platform-level access puts your entire Google ecosystem at risk - including Gmail, Drive, and other services.
The golden rule: You should always own your Google Ads account. Your agency should have access to it - never ownership of it.
The two methods for sharing access
There are two ways to give someone access to your Google Ads account:
- MCC (Manager Account) linking - The agency links your account to their Manager Account (also called a My Client Centre or MCC). This is the professional, recommended method.
- Email invitation - You invite a specific email address to access your account directly, with a chosen access level.
Both methods are legitimate, but MCC linking is the industry standard for agency-client relationships. Here is how each works.
Method 1 - MCC account linking (recommended)
Most professional agencies and experienced freelancers use a Google Ads Manager Account (MCC) to manage multiple client accounts. When they link your account to their MCC, they can access and manage your campaigns without needing your login credentials.
How the process works
From the agency's side:
- The agency logs into their MCC at ads.google.com/home/tools/manager-accounts
- They click "Link existing account" and enter your Google Ads Customer ID (the 10-digit number in the format xxx-xxx-xxxx, found in the top right of your Google Ads dashboard)
- They send a link request to your account
From your side:
- Log into your Google Ads account
- Click the Admin icon (spanner) in the top menu
- Go to "Access and security" then "Managers"
- You will see the pending link request from the agency
- Review the request and click "Accept"
That is it. The agency now has access to your account through their MCC. They do not need your login credentials. You retain full ownership and can revoke access at any time.
Why MCC linking is the best method
- You keep full ownership: Your account remains yours. The agency is a manager, not an owner.
- Easy to revoke: You can unlink the agency from your account with one click if you part ways.
- No credential sharing: The agency accesses your account through their own MCC login. Your Google account credentials are never shared.
- Professional standard: Any reputable agency will have an MCC and will use this method. If they do not, that is a red flag.
- Audit trail: Changes made by the agency are logged and attributable, so you can see who did what.
Method 2 - Email invitation
If you are working with a freelancer who does not have an MCC, or if you prefer to grant access directly, you can invite them via email.
How to invite someone via email
- Log into your Google Ads account
- Click the Admin icon (spanner) in the top menu
- Go to "Access and security"
- Click the blue "+" button to add a new user
- Enter the person's email address (must be a Google account)
- Select the access level you want to grant (see below)
- Click "Send invitation"
The recipient will receive an email with a link to accept the invitation. Once they accept, they can access your account by logging into Google Ads with their own email address.
Understanding Google Ads access levels
Google Ads offers several access levels, each with different permissions. Understanding these is crucial for maintaining control of your account.
Admin access
Full control over the account. Admin users can:
- Create, edit, and delete campaigns
- Manage budgets and bidding strategies
- Access all reporting and analytics
- Grant and revoke access for other users
- Change account settings, including billing
- Link and unlink manager accounts
Standard access
Can manage campaigns but cannot control account-level settings. Standard users can:
- Create, edit, and delete campaigns
- Manage budgets and bidding strategies
- Access all reporting and analytics
- Create and manage audiences
They cannot grant access to others, change billing, or modify account-level settings.
Read-only access
Can view everything but cannot make changes. Read-only users can:
- View all campaigns, ad groups, keywords, and ads
- Access all reports and analytics
- Export data
They cannot create, edit, or delete anything.
Email-only access
The most limited level. Email-only users receive performance reports and notifications via email but cannot log into the account at all.
What access level should you give your agency?
This depends on the arrangement, but Ben's recommendation is:
- For agencies managing your account: Standard access via MCC linking. This gives them everything they need to manage campaigns effectively without access to billing or the ability to add/remove other users.
- For consultants reviewing your account: Read-only access. They can audit and analyse without the ability to change anything.
- For business partners or co-owners: Admin access, but only if they genuinely need full control.
Ben's rule: Never give Admin access unless absolutely necessary. Standard access is sufficient for 99% of agency-client relationships. Admin access should be reserved for account owners only.
How to revoke access
If you need to remove someone's access - whether you are switching agencies, ending a contract, or simply cleaning up old user accounts - here is how:
Revoking email-based access
- Go to Admin > Access and security
- Find the user you want to remove
- Click the three-dot menu next to their name
- Select "Remove access"
- Confirm the removal
Unlinking an MCC
- Go to Admin > Access and security > Managers
- Find the manager account you want to unlink
- Click "Unlink"
- Confirm
Access is revoked immediately. The agency or freelancer will no longer be able to see or manage your account.
Common mistakes when sharing Google Ads access
1. Sharing your Google account login credentials
Never share your Gmail username and password with anyone. This gives them access to everything connected to your Google account - Gmail, Drive, Calendar, YouTube, and more. Always use the platform-level access methods described above.
2. Letting the agency create the account
If an agency creates your Google Ads account using their own email, they own it. If you part ways, they can refuse to hand it over (or charge you for the transfer). Always create the account yourself and then grant them access.
3. Giving Admin access by default
Admin access includes the ability to change billing, remove other users (including you), and modify account settings. Unless there is a specific reason, Standard access through MCC linking is the correct choice for agencies.
4. Forgetting to revoke access after ending a contract
When you stop working with an agency or freelancer, revoke their access immediately. Old access credentials sitting on your account are a security risk, even if the person has no intention of misusing them.
5. Not checking who has access periodically
Audit your account access at least once a quarter. Go to Admin > Access and security and review every user and manager account linked to your account. Remove anyone who should not be there.
Red flags when an agency asks for access
A professional agency will follow the process described above. Here are warning signs that something is not right:
- "Send us your login details" - No legitimate agency needs your Google account password. They should use MCC linking or an email invitation.
- "We will create the account for you" - This means they will own the account, not you. Always create the account yourself.
- "We need Admin access" - For standard campaign management, Standard access is sufficient. Admin access is only needed in specific circumstances.
- "You don't need access to your own account" - Some agencies restrict client access to prevent scrutiny. You should always have Admin access to your own account.
- They cannot provide a Customer ID for their MCC - Any professional agency managing Google Ads will have an MCC with a Customer ID. If they do not, they may not be experienced enough to manage your campaigns.
Your Google Ads account is a business asset. Treat it like one. Maintain ownership, control access carefully, and never hand over more than necessary.
If you are looking for a Google Ads specialist who respects account ownership and operates with full transparency, request a free 90-Day Growth Plan from Ben. He will show you exactly what your ads should be generating - and you will retain full control throughout.
Frequently asked questions
What is an MCC account in Google Ads?
An MCC (My Client Centre) or Manager Account is a Google Ads account type designed for agencies and freelancers to manage multiple client accounts from a single dashboard. It allows them to access your account without needing your login credentials.
Should I give my agency Admin access to Google Ads?
No. Standard access through MCC linking is sufficient for campaign management. Admin access allows changes to billing and user permissions, which are not needed for day-to-day management. Only account owners should have Admin access.
Can I revoke Google Ads access from an agency at any time?
Yes. You can unlink an MCC or remove a user's email access at any time through the Access and Security settings. The change takes effect immediately.
What happens to my Google Ads data if I switch agencies?
Your data stays with your account. Campaign history, conversion data, and audience lists belong to the account, not the agency. As long as you own the account, switching agencies does not affect your data.
How do I know my agency is not misusing my Google Ads account?
Review the Change History log regularly (found under Tools > Change History). This shows every action taken in the account, including who made each change. Professional agencies welcome this transparency.
