Keep the business in control of its own listing

The profile represents the contractor, so an authorized business owner should remain able to access it even when an agency manages updates. Use the platform’s owner and manager roles rather than sharing one person’s password. Google distinguishes permission levels, and its help guidance explains primary ownership transfer and manager access.

Create a company-controlled Google account with strong authentication and recovery details managed by the business. The account should be accessible to the owner or designated administrator. Do not leave recovery tied only to a former employee’s personal phone or to a vendor mailbox that the company cannot access.

An agency needs the minimum role required for the work. If it only updates hours, photos or services, it may not need the primary-owner role. Confirm role capabilities in Google’s current interface before granting access.

Inventory users before changing anything

List every owner and manager currently attached to the profile, the account address, the role and the business purpose. Ask the current owner to confirm which people still need access. Remove former staff or vendors using the platform’s normal process after the business confirms no business record or transition task depends on their access.

Do not remove the only primary owner before the replacement owner is ready. If a person is leaving, establish a new owner or manager with the proper account and verify they can sign in before the handoff. Preserve continuity for responses, hours, service updates and customer communications.

When an external agency requests access, have the business verify the request through a known contact channel. Google warns users to take care when granting owner-level access. A request that arrives unexpectedly should be checked before approval.

Plan a primary ownership transfer

If the business is changing the person who owns the profile, follow Google’s current transfer instructions. The person who will become primary owner generally must already be an owner or manager before transfer, and Google may apply restrictions or waiting periods depending on the account state. Verify the live workflow rather than promising a same-day handoff.

Schedule the transfer when the owner and incoming administrator can both confirm access. Record the profile name, primary owner before and after, date, open verification notices and any connected accounts or booking tools. Do not edit the business name, address and phone at the same time as a handoff unless those facts are also changing and the owner has approved them.

If the old owner cannot be reached or access is disputed, use Google’s request-access or support process. Do not create a duplicate profile as a workaround. Keep evidence that the business operates the location and is authorized to manage the listing.

Use an agency handoff checklist

  • Confirm the exact Business Profile and real business owner.
  • Keep at least one authorized company owner with durable account recovery.
  • Add the agency through a named role, not a shared password.
  • Document approved tasks: information updates, photos, review replies or reporting.
  • Set limits on changes to name, address, phone, categories and service areas.
  • Agree how the owner reviews and approves material edits.
  • Set an access end date and handoff plan if the agency relationship ends.
  • Verify access removal and preserve the company’s own records at termination.

Protect profile facts during a vendor change

A transition can create pressure to rename a listing, add a new address or rebuild categories. Separate access transfer from business-information changes. First establish control; then review factual details with the owner and use Google’s edit workflow for approved updates.

Compare the public profile with the website’s phone, hours, service area and real business name. Do not let an agency add search phrases to the name field, create a profile for every suburb or publish an office address the contractor does not staff. A vendor agreement does not make inaccurate profile facts acceptable.

Keep a dated record of the profile state before and after the change. If a profile becomes suspended or requests verification, stop making repeated edits and follow the official support guidance. Repeated profile creation can make ownership and customer information harder to resolve.

Separate Google profile access from other account access

The Business Profile is only one asset. Maintain a company inventory of the website registrar, hosting, Google Analytics, Search Console, Tag Manager, Ads, phone system, CRM and review link. Each product can have a different owner or access model, and removing someone from one does not remove access from the others.

Grant role-based access and preserve the business’s administrator account. Do not send passwords in a shared document or ask an agency to store the owner’s login. Keep recovery codes and billing access with the business according to its security process.

At offboarding, transfer deliverables and reports, remove account roles with approval, rotate any shared credentials that remain, and test the owner’s access. A simple checklist is easier to audit than a last-minute email thread.

Review ownership on a regular cadence

Once or twice a year, confirm the primary owner, company managers, vendor roles, recovery methods and profile status. Repeat the check after a staff departure, business sale, agency change or domain migration. Store the review date and accountable owner in the company’s asset register.

The goal is not to make access difficult for a marketing partner. It is to give the partner the access needed to work while making sure the contractor can still operate its own public profile. Clear ownership reduces downtime when a person leaves or a billing relationship changes.

Google’s current roles and access steps can change. Use its official profile management guidance during each transfer and avoid relying on an old how-to screenshot for a sensitive access change.

A step-by-step access handoff

  • The current owner checks the profile name and the list of people with access.
  • The company identifies the incoming owner and confirms their Google account and recovery method.
  • If a transfer is required, add the incoming person with the appropriate role first and follow the current transfer process.
  • The new owner confirms they can open the listing and see the expected profile controls.
  • The business approves any factual listing updates as a separate change.
  • The outgoing employee or agency is removed only after handoff and deliverable checks are complete.
  • The owner records the transfer date and confirms access to the company’s related analytics and website accounts separately.

Include access in the agency agreement

A simple scope document can say which profile tasks the agency may perform, who approves a name/address/phone/category change, how review replies are handled, how reports are shared and what happens at termination. The agreement should name the contractor’s owner as the party that controls the business listing and ensure that access can be removed promptly when the relationship ends.

If the agency manages multiple client profiles, it should use its own named account or approved organization access rather than requesting a client’s password. The owner should know which role is granted and have a way to audit current users.

At offboarding, share the current profile facts, open support requests, scheduled updates and any approved photo or content assets. Confirm the business owner can access the profile and remove the former vendor role through the official interface.

Respond to an unexpected access request safely

If a new person asks for ownership, verify the request through a contact method the business already trusts. Check the profile name and location, the person’s role and why they need that level of access. Do not approve an urgent request simply because a message threatens that the listing will disappear.

Avoid giving an outside party passwords, one-time codes or recovery codes. Google’s profile-security guidance warns owners to add people with care because owners can edit and transfer ownership. If an access dispute appears, preserve the request and use Google’s official support route.

A practical handoff leaves the owner able to sign in, see the correct listing and manage access without depending on the outgoing vendor. Test that ability before removing former access, then ensure unnecessary accounts are no longer attached.

Write down what happens if the relationship ends

An orderly offboarding identifies who will receive profile access, when agency permissions end, which open edits or support requests remain and where approved photos and reports are delivered. The company should be able to continue managing the listing without asking the previous vendor to log in.

Avoid deleting a vendor before the replacement owner confirms access, but do not leave former accounts active indefinitely. Set a specific handoff date, have the business test its account and then remove the former role through Google’s access controls.

Keep the transfer receipt or internal note with the company asset inventory. Record the profile URL, primary owner, manager list and date checked. This small record can prevent a later staff member from repeating the same access investigation.

Sources and further reading

A RELEVANT NEXT STEP

See the indicative Local SEO + AIO/GEO scope for profile support with client-owned access. The contractor remains the owner of its listing and business facts.

Book a Walkthrough