Google Search Console Access: How to Add Your Agency

1. What Google Search Console Access Actually Means

Quick Answer: Google Search Console access is permission to view and act on one specific property, granted per Google account. You never share a password. The property owner adds someone’s Gmail address, picks a permission level, and that person sees your Search Console data under their own login.

Two ideas get muddled here, and untangling them is most of the battle.

• Verification is proof. Someone proves they control the website by putting a token on it: an HTML file, a meta tag, or a DNS record. Verification creates an owner.
• Access is an invitation. An existing owner types in a Google account email and grants a permission level. No token, no website change, instant.

Your agency needs the second, almost never the first. An agency that verifies with their own token has stopped being a guest and become a keyholder. Per Google’s permissions documentation, removing a keyholder is a very different job from removing a guest.

2. What Can Each Permission Level Actually Do?

Quick Answer: Search Console has three working levels: Owner, Full user and Restricted user. Full users can do nearly all the SEO work (submit sitemaps, request indexing, verify fixes) but cannot add or remove people. Only Owners can manage users. The table below maps every common task to the level it needs.

The dropdown gives you three choices, and the difference between them is narrower than most owners assume. A Full user can run essentially the whole SEO programme. What they cannot do is change who else gets in.

Read down the Restricted column and you can see why it frustrates agencies. No sitemap submission, no indexing requests, no fix verification: the three things an SEO team does weekly. Restricted is a reporting seat, not a working seat.

The Performance report is the one thing everyone can see, and it’s where most of the value sits: it’s how you know which title tags are actually earning clicks. The action rows are what separate the levels — disavowing a toxic link, for instance, sits behind Full user, which matters if you’re running backlink outreach and need to clean up what comes back.

3. Which Access Level Should Your Agency Get?

Quick Answer: Give your agency Full user. It lets them submit sitemaps, request indexing and verify fixes, the work you hired them for, while leaving user management and ownership with you. Restricted blocks real work. Owner hands over control you may struggle to take back later.

Here’s the Search Console access decision in plain terms:

• Full user: the default for any agency doing the work. They can fix, submit, request and diagnose. They cannot lock you out, because they cannot touch the user list.
• Restricted user: for people who only read. A finance manager checking traffic, a junior reviewing a report, a stakeholder who wants visibility. Give this to an agency and you’ll be forwarding sitemap requests by email for the rest of the engagement.
• Owner: almost never. The only honest reason is if the agency must link Google Analytics or manage other owners on your behalf. Both are one-off jobs. Grant it, do the task, downgrade.

Agencies that insist on Owner from day one are worth a follow-up question. Sometimes the answer is reasonable. Often it’s just how they’ve always done it, which is how avoidable SEO mistakes and stubborn SEO myths quietly become standard practice. The same logic applies across your stack — it’s why we tell clients to keep ownership of the ad account, Page and Pixel too.

4. How to Add Your Agency to Google Search Console

Quick Answer: To grant Google Search Console access, open Search Console, pick your property, click Settings, then Users and permissions, then Add user. Enter your agency’s Google account email, choose Full, and save. Access is live immediately — no email invitation to accept, no waiting. You must be a property owner to see this page.

How to give an agency Google Search Console access

Five steps, under a minute, done from any browser where you’re signed in as the property owner.

1. Open the right property. Sign in at Search Console and select the property from the dropdown at the top left. If you manage both a domain property and a URL-prefix one, grant access on the domain property — it covers every subdomain and protocol.
2. Go to Settings. It’s the gear icon at the bottom of the left-hand navigation pane.
3. Click Users and permissions. If you can’t see this page, you aren’t an owner. Find whoever is before going further.
4. Click Add user and enter the email. It must be a real Google account. A Google Workspace address works; an email distribution group does not.
5. Choose Full and save. The agency sees the property the next time they refresh Search Console.

Two errors come up often enough to name. “This user may only be added as Owner” means the person already owns a containing property, so Google won’t let you demote them on a child property. The Users and permissions page is missing means you’re a Full user yourself, not an owner — common when a developer set the property up years ago and never handed it over.

5. How Are Malaysian SME Properties Actually Set Up?

Quick Answer: Fewer than one in five Malaysian SMEs arrive at a new agency actually owning their own Search Console property. In ZenWeb’s client sample, 34% had a previous agency as the only verified owner and 27% couldn’t identify their owner at all. The chart below breaks down what we find at handover.

We check Search Console access and ownership before we touch anything else on a new engagement. The pattern below has been consistent for years, and it explains why so much SEO work starts three weeks late.

Roughly six in ten Malaysian SMEs either don’t own their Search Console property or don’t know who does.

The 21% with no property at all are, oddly, the easiest cases. Nothing to untangle. We verify in the client’s name and start clean, the same way we would for SEO on a brand-new website. The 34% are the painful ones.

6. Verify Ownership Yourself Before Anyone Else Does

Quick Answer: Verify the property with a company Google account you control, using DNS verification, before you invite any agency. Ownership then sits with the business rather than a person or vendor. Everyone else — agencies, developers, freelancers — gets added as a Full user afterwards.

Three details make ownership durable:

• Use a company account, not a personal one. [email protected] survives Ahmad leaving. [email protected] does not, and plenty of Malaysian SMEs have their whole search presence hanging off a staff member’s personal Gmail.
• Verify by DNS where you can. A TXT record at your registrar can’t be deleted by a developer redesigning the site, and it verifies the domain property: every subdomain, both protocols, one record.
• Write down who holds it. One line in your handover doc. It’s the discipline that makes agency onboarding painless instead of archaeological.

If a previous agency already verified with their own token, verify yourself anyway, because a property can hold many verified owners. It costs nothing, and it means that whatever happens next, you cannot be locked out.

7. What Does Slow Access Actually Cost You?

Quick Answer: Access delays push back every dependent task. In ZenWeb’s client sample, clients who grant Full user access in the first week are working in two days. Those who must chase a former agency wait 16 days, and first ranking movement slips by around three weeks. The table below shows the knock-on effect.

Nothing meaningful happens in SEO before Search Console access lands. No indexing requests, no crawl diagnostics, no fix verification. The delay isn’t dead time you make up later. It shifts the whole timeline right.

The unresponsive-agency row is the one worth staring at. Five weeks of delay is a full month of budget spent on work that can’t start. It ruins an otherwise sound SEO ROI calculation, and it makes early traffic forecasts look wrong through no fault of the forecast. It also stalls the work itself: you can’t prioritise the highest-impact fixes without the data, and you can’t tell whether a service page or a landing page is underperforming until you can see its queries.

Timing makes it worse. Lose five weeks in November and you’ve lost the run-up to year-end sales, and seasonal SEO for Raya, CNY and year-end only works if the work starts months before the season does.

8. Removing an Agency: The Step Everyone Forgets

Quick Answer: Removing a Full user is instant and final. Removing a verified owner is not. Their verification token stays on your site, and they can re-verify at any time. You must delete the token itself from Users and permissions → Unused ownership tokens to close the door properly.

This is the part almost no guide mentions, and it’s the reason ownership matters so much.

Remove a Full user and they’re gone. Remove a verified owner and you’ve taken their seat but not their key. As Google’s documentation states plainly, verification tokens are not deleted or revoked when you remove an owner, and while the token remains that owner can re-verify and regain access. Google added a dedicated Unused ownership tokens list precisely because this catches people out; the 2024 Search Central update on token management made that list more accurate.

So the offboarding sequence is:

1. Confirm you’re a verified owner first. If the leaving agency is the only one, verify yourself before removing anything, because when all verified owners go, everyone loses access after a grace period.
2. Remove their access. Users and permissions, the three-dot menu, Remove access.
3. Check Unused ownership tokens. Open the list on the same page and look for anything tied to them.
4. Delete the token at its source. An HTML file off the server, a meta tag out of the homepage, a DNS record from the registrar: whichever method they used. Remove only theirs; shared tokens can also verify Merchant Center or Workspace.

Then check the Ownership history log. If a name you don’t recognise appears there and you didn’t add it, treat it as a security problem, not an admin one. Do the same sweep across your other platforms — the reasoning is identical to why you protect your Pixel data when changing Facebook Ads agency.

9. Are Stale Ownership Tokens Getting Worse Over Time?

Quick Answer: Yes, and steadily. Leftover tokens accumulate because nobody deletes them when a vendor leaves. Across audited Malaysian SME properties, the average number of unused ownership tokens rose from 0.9 in 2022 to 2.6 in 2026, and the share of properties carrying at least one stale token doubled.

Every agency, developer, freelancer and platform that ever verified your site leaves a token behind. Nothing expires them. They just pile up.

The climb tracks how many vendors a growing business cycles through. Each one verifies, each one leaves, none clean up. A five-year-old Malaysian SME site with two agency changes and a redesign typically carries three live keys held by people who stopped working on it years ago.

It’s a quiet risk rather than a dramatic one. But it’s worth an hour of your time, in the same way that clearing crawl errors in Search Console is worth an hour — nothing breaks today, and then one day it does. If your agency’s monthly reporting never mentions access hygiene, ask why. Search itself keeps shifting, and wherever SEO goes next, first-party access to your own search data only gets more valuable.

10. Frequently Asked Questions

1. How do I give my agency Google Search Console access?

Open Search Console, select your property, click Settings in the left navigation, then Users and permissions, then Add user. Enter your agency’s Google account email, choose Full as the permission level, and save. Access is live straight away with no invitation to accept. You must be a property owner to see the Users and permissions page at all.

2. Should my agency be a Full user or an Owner?

Full user, in nearly every case. It covers sitemaps, indexing requests, fix verification and disavows, everything an agency does week to week, while leaving user management and ownership with you. Owner adds only the ability to manage users and link Analytics, and removing an owner later is significantly harder because their verification token stays on your site.

3. Can I remove Search Console access from my old agency?

Yes, and it’s instant if they were a Full or Restricted user. If they were a verified owner, removing them takes their seat but not their key: their verification token remains on your site and lets them re-verify. Open Unused ownership tokens on the Users and permissions page and delete the token from wherever it lives — the HTML file, meta tag, or DNS record.

4. What happens if I remove the only verified owner?

Everyone loses access after a grace period, including you. Google keeps collecting the data, but nobody can see it until someone verifies ownership again. So always verify yourself first, confirm it went through, and only then remove the outgoing owner. This is the single most common way Malaysian SMEs accidentally lock themselves out of their own search data.

5. Can I give Google Search Console access without sharing my password?

Yes, and you should never share the password. Google Search Console access is granted per Google account: you enter your agency’s email address and they sign in with their own credentials. They never see your password, and you can revoke their access on your own at any time without changing it. Sharing logins removes both of those protections.