Google Ads Account Access: Who Should Own It in Malaysia?

1. Who Actually Owns a Google Ads Account?

Quick Answer: Ownership is a manager-account setting, not a payment record. Google is explicit: if a manager account creates an account, that manager automatically becomes its owner. If the manager merely links an existing account, it does not get ownership unless you grant it.

Google Ads has two separate ideas that get confused constantly. Access is who can log in and what they can touch. Ownership is which manager account (MCC) sits above yours with administrative rights over it. A client account can have only one owner.

The owner’s admins can invite users, remove users, grant or revoke admin rights, accept or decline other managers, and adjust security settings on your account. That is the whole reason access disputes exist. Whoever holds ownership does not need your permission to change who else gets in.

There is a genuine protection built in, and most business owners never hear about it: a client account can always unlink a manager, even an owner manager. What you cannot do, if you have no admin access at all, is exercise that right, because unlinking happens inside the account you have been locked out of.

2. The Ownership Setups We Find in Malaysian SME Accounts

Quick Answer: Across the Malaysian SME accounts ZenWeb audits, 41% were created inside an agency’s manager account, so the agency is the owner and the business has no admin rights. Only 29% are set up the way Google recommends: client-owned account, agency linked as a manager without ownership.

Add the first, third and last rows together and 60% of the accounts we look at are held by someone other than the business paying for them. Few of those owners are acting in bad faith. Most agencies create accounts inside their manager account because it is faster, and nobody explains the ownership side effect.

That side effect only shows up on the day you want to leave. It is also the day the same question surfaces on the social side, which we cover in who should own your ad account, Page and Pixel.

3. The Five Access Levels, and What Each One Can Do

Quick Answer: Google Ads has five access levels — Email-only, Billing, Read-only, Standard and Admin. Only Admin can give or remove another person’s access, and only Admin can accept or unlink a manager account. Everything protective sits in that one level.

Google’s full permissions list runs to two dozen rows. Most of them do not change a thing about who controls your business. The table below strips it back to the six decisions that do.

Read the bottom two rows again. They are the only ones that protect you, and they are available at exactly one level. A Read-only login makes you a spectator with a nice view. It does not let you remove the person spending your money.

4. What Standard Access Lets Someone Change Without Telling You

Quick Answer: Standard access cannot touch your users, but it can rewrite how your money is spent. Bidding strategy, budgets, geographic targeting, audience lists and conversion settings are all editable by any Standard user, silently, on any given afternoon.

Standard access is the right level for the people running your campaigns. It is worth knowing what it covers, because “they can’t lock me out” is not the same as “they can’t hurt me”:

• The bidding strategy. A Standard user can move you between manual CPC and Smart Bidding in two clicks, which changes the economics of every auction you enter.
• Bids and modifiers. Device, time-of-day and location bid adjustments, plus seasonality adjustments before a festive spike.
• Who sees your ads. Location targeting and the Search Partners setting, both of which quietly widen or narrow your reach.
• What counts as a win. Conversion values feed Smart Bidding directly, so editing them redirects your budget.
• Your customer data. Uploading or removing a Customer Match list is a Standard-level action.
• New campaigns and assets. Adding lead form assets, changing how phone leads reach you, or launching Demand Gen campaigns needs no approval from you.
• The shape of the account. Restructuring campaigns, covered in our guide to Google Ads account structure, and running campaign experiments against your live traffic.

None of this is an argument for withholding Standard access from your agency. It is an argument for reading the change history and asking for a monthly report that shows what changed, not just what it cost.

5. What a Bad Access Setup Costs on the Day You Switch

Quick Answer: When the business owns the account, a handover takes about a day. When the agency owns it and the parting is not friendly, the median is 34 days. And if the only admin was a freelancer who has gone quiet, you are rebuilding from zero.

The days are the visible cost. The invisible one is worse. A rebuilt account starts with no conversion history, so Smart Bidding is learning from nothing, and every remarketing and Customer Match list you spent two years assembling is gone.

Nothing in that bottom row requires bad behaviour. A freelancer changing careers, an agency owner who stops replying, a Gmail account that gets deleted — the outcome is identical. This is why we walk clients through changing Google Ads agency without losing data before they give notice, not after.

6. Malaysian SMEs Are Slowly Taking Ownership Back

Quick Answer: In 2022, only a third of the Malaysian SME accounts we audited had the business holding admin access. By 2026 it is 59%. The shift is real but slow, and most of it happens after a business has already been burned once.

Two forces are pushing the line up. Businesses that lost an account once never make the mistake twice. And more agencies now set it up properly from day one, because refusing to is an obvious warning sign — one we list among the Google Ads agency red flags worth walking away from.

7. The Setup to Insist On: Six Steps

Quick Answer: Create the account yourself on a company email, keep two admins from your own team, link the agency as a manager without granting ownership, and give individual staff the lowest level that lets them do their job. It takes about twenty minutes.

1. Create the account on a company domain email. Not the marketing manager’s personal Gmail. When that person leaves, the email address stays with you.
2. Appoint two admins from your own company. Google warns that a single-admin account can lose control of its tags if that person becomes unavailable. Two is the minimum; the second one is often the founder.
3. Link the agency as a manager account, not as the owner. Their manager account gets campaign control. Ownership stays where it belongs. Google’s rule is clear: a linked manager does not get ownership unless the client account switches it on.
4. Give each person the lowest level that works. Standard for whoever runs campaigns, Billing for finance, Read-only for anyone who just wants the numbers, Email-only for the boss who only reads the report.
5. Never share one login. Google is direct about this: grant each person their own access using their own Google Account. A shared password leaves no trail of who changed what.
6. Review the user list every quarter. Open Admin → Access and security, remove anyone who has left, and check the Managers tab for any linked manager account you do not recognise.

If your agency resists step 3, that is your answer about the agency. A real Google Partner has no reason to hold your account hostage, and every reason not to.

8. Five Access Mistakes Malaysian SMEs Keep Making

Quick Answer: The five that cost the most: accepting a Read-only login and calling it access, letting the agency create the account, leaving ex-staff as admins, sharing one password, and never checking the Managers tab.

• Accepting Read-only and thinking you are covered. You can watch the account being emptied. You cannot stop it.
• Letting the agency create the account “to save time”. It does save time. It also hands them ownership by default, permanently, unless they choose to hand it back.
• Leaving former staff and old freelancers as admins. Google’s own guidance is blunt: unless you remove them, they can still sign in and make changes.
• Sharing one login across the team. The change history becomes useless, and one leaked password exposes your billing details.
• Never opening the Managers tab. This is where a manager account you have never heard of quietly sits, months after you stopped working with them.

The same discipline applies to everything wired into the account. Analytics links and conversion tags are admin-level product links, which is why our conversion tracking setup guide starts with who holds admin.

9. Conclusion: Own the Asset, Rent the Expertise

You would not register your company in your accountant’s name. The Google Ads account deserves the same instinct. It holds your conversion history, your audience lists and years of learning about which Malaysian searches turn into customers — all worth more than the campaigns running on top of it.

Sorting out Google Ads account access is not a confrontation. It is a twenty-minute admin task any decent agency will help with, because a client who owns their account is a client who stays by choice. Log in, open Access and security, and see whose name is on the top row.

If the answer is not yours, fix that first, before the next campaign or the next budget increase. ZenWeb sets up every client this way from day one, which is one small part of what professionally managed Google Ads should look like.

10. Frequently Asked Questions

Who should own the Google Ads account, the business or the agency?

The business. Your company should create the account, hold admin access, and link the agency as a manager account. The agency gets everything it needs to run your campaigns, and you keep the ability to remove them. Google’s own structure supports this: a linked manager does not receive ownership unless your account grants it.

What are the Google Ads account access levels?

There are five: Email-only, Billing, Read-only, Standard and Admin. Email-only receives reports. Billing handles payment details. Read-only can view campaigns. Standard can edit campaigns and budgets. Admin can do all of that plus add or remove users and accept or unlink manager accounts.

Can my agency lock me out of my own Google Ads account?

If they created the account inside their manager account, yes — as the owner, their admins can remove users and revoke admin access. If you own the account and they are simply a linked manager, no. You can unlink them at any time, and they cannot remove you.

How do I check who has access to my Google Ads account?

Sign in, click the Admin icon, then Access and security. The Users tab lists every person with access and their level. The Managers tab lists every manager account linked to yours, including any owner. Review both quarterly and remove anyone you no longer work with.

What access level should I give my Google Ads agency?

Link their manager account and give them the standard campaign controls, without granting ownership. Do not add individual agency staff as admins on your account. If the relationship ends, you would have to remove each person one by one instead of unlinking a single manager.