Guides · Accounts and security
How to Give Someone Access to Google Ads Without Your Password
By Josh Croom · October 27, 2026 · 12 min read
To give someone access to Google Ads, an admin opens Admin, then Access and security, clicks the plus button, types the person's own email and picks an access level. An agency links its manager account instead, and nobody ever needs your password or the code Google sends to your phone.
A new helper, an old login and a text message
Tuesday, 4:10 PM. A shop owner hires someone to fix her ads. The new person needs into Google Ads and Search Console, and nobody remembers who set them up. The office manager finds an old password on a sticky note and texts it over. A minute later Google sends a code to the owner's phone, and she forwards that too.
It works, so it feels fine. But a full key to the business now sits in a text thread, and it opens more than the ads, because the same Google login can open Gmail and every other Google tool tied to it. The right way takes about the same five minutes: add the person as a user on each tool, and keep the login with the business.
The text you should answer with an invite
A request like this can come from a real helper or from a thief, and the right answer is the same either way. Offer to add them as a user, and keep the code.
Hey, it's Jake with the web team. Google just sent you a 6-digit code. Can you text it to me so I can get into the ads?
I don't share codes. Send me the email you want added, and I'll invite you as a user right now.
Sounds good. Use my work email, and I'll accept the invite when it comes in.
Why a shared password is the wrong key
Every Google tool keeps a list of users, and each person on that list signs in with their own Google account. That list lets you see who's in, set what each person can do and remove one person in a click, without changing anything for anyone else.
With a shared password, you can't tell who made a change or limit what each person touches. To take access back, you have to change the password for everyone. Google's Business Profile help says it directly: each user needs their own Google account so they can manage the profile without you sharing your password.
The code or prompt Google sends to your phone matters even more. It's the second lock, and it's why a stolen password alone often isn't enough. In a year-long Google study with New York University and UC San Diego, a sign-in prompt on the owner's phone blocked 99% of mass phishing attacks and 90% of attacks aimed at one person. That protection only lasts while the code or prompt stays with the person Google sent it to.
How often access trips businesses up
Two of these numbers come from a year of our own client records, and the third comes from a Google study of stolen accounts.
- 76%of our clients had a thread with us about Google accessin one year, across Search Console, Analytics, Business Profile, Tag Manager and Google Ads
- 67%of their Google Ads accounts had one admin on the client's sideso one departure can leave nobody on your side able to add users
- 99%of mass phishing tries stoppedby a sign-in prompt on the owner's phone, in a year-long Google study
How to add someone to your Google Ads account
These five steps take about five minutes, whether the helper is new staff or a freelancer.
Step 1
Sign in as an admin
Only an admin can add users in Google Ads, so sign in with a login that has Admin access. If you can't find the plus button in step 3, you aren't an admin yet, and you'll need to ask whoever is.
Step 2
Open Access and security
Click Admin in the menu, then Access and security. The Users tab lists everyone who can sign in today, with each person's access level next to their email.
Step 3
Click the plus button and enter their email
Type the person's own email address, never a shared one. Google's help says the person you invite must have a Google account or create one, so a work email still works once they set one up.
Step 4
Pick the lowest level that does the job
Standard lets someone edit campaigns, and Admin also lets them add users and link accounts. Read-only, Billing and Email-only are for people who only need to look at the account, pay the bill or get reports.
Step 5
Send the invitation and tell them to accept it
Click Send invitation, then tell the person to watch for the email from Google. You'll get a notification in the account once they accept, and you can cancel the invite from the Actions column if plans change.
Which Google Ads access level to pick
Google Ads has five access levels. Give each person the lowest one that covers their job, because any higher level lets them change things the job never touches.
Admin is the one to guard. An admin can add and remove people, accept manager links and complete advertiser verification, so hand it out the way you'd hand out a key to the building. Google's own help warns that an account with only one admin can lose access to its tags if that person becomes unavailable.
| Access level | What it can do | Good fit for |
|---|---|---|
| Admin | Everything below, plus add users, change access levels, link other Google products and accept or remove manager links | Two people on your own team |
| Standard | Edit campaigns and run reports, but not manage users or links | A staff member who works in the ads |
| Read-only | View campaigns, users and billing, and run reports, with no campaign or billing edits | An owner, partner or board member who wants to look |
| Billing | View and edit billing information, and run billing reports | Whoever pays the Google bill |
| Email-only | Receive notification emails and reports | Anyone who only needs the reports |
How to give an agency access: the manager account link
An agency usually works from a manager account, which is one login that holds many client accounts. Instead of adding each person at the agency as a user, the agency sends a link request from its manager account to your 10-digit Customer ID.
Your admin then accepts it. In your account, go to Admin, then Access and security, and open the Managers tab. Requests show under Link request, with Accept and Decline in the Actions column. Google emails the request to your admins too, but accepting it inside Google Ads is the safer habit.
Know what you're handing over. Once you accept, admins on the manager account can manage your campaigns and get your notification emails. If the manager account has ownership, its admins can also edit your users, managers and product links. Keep two admins of your own on the account either way, so your business can always remove the link without anyone's help.
Your other Google tools: where the list lives and which role fits
Each Google tool keeps its own list of users, so a new agency or web person usually needs adding in four or five places. These menu names are current as of October 2026, and Google renames menus now and then.
| Tool | Where the list of users is | Role for an agency | Why that role |
|---|---|---|---|
| Google Ads | Admin, then Access and security | A manager account link your admin accepts | Runs your campaigns with no shared password |
| Search Console | Settings, then Users and permissions | Owner | Linking it to Google Ads takes an owner |
| Google Analytics | Admin, then Access Management | Administrator | Sets up and counts your conversions |
| Business Profile | Business Profile settings, then People and access | Owner, never primary owner | A manager can't add or remove users |
| Tag Manager | Admin, then User Management | Publish, on the container | Adds and publishes your tracking tags |
When nobody knows who owns the tool
Business Profile: A profile has one primary owner, and it can also have other owners and managers. Only an owner can add or remove people or remove the profile, so keep the primary owner seat with someone on your own team. If someone outside your business holds the profile, go to business.google.com/add, find your business and select Request Access. Google emails the current owner, who has 3 days to answer, and if nobody does, you may get the option to claim it yourself. A service-area business with no storefront contacts Google support for the transfer instead.
Search Console: Every property needs at least one verified owner, meaning someone who proved ownership with a token like a DNS record or a file on the site. If your only verified owner left, verify the site again yourself. Add your domain in Search Console, copy the TXT record it gives you into your domain's DNS settings, and click Verify. Then add your helper from Settings, then Users and permissions.
Tag Manager: Google's help says to keep at least two active administrators, with the account managed by someone in your own organization rather than an outside agency. So give your agency Publish rights on the container, and the account itself stays yours.
Mistakes that cause lockouts
- Sending a password or a sign-in code by text, email or chat, even to someone you trust, because the message can sit in a thread for years.
- Making a helper the primary owner or the only admin, which leaves your business unable to add or remove anyone without them.
- Removing the old admin before the new one can sign in, which can leave nobody with the rights to fix it.
- Letting an invitation sit until it expires. Across our clients, 18% of Google Ads accounts held an admin invite that expired before anyone used it.
- Giving Search Console Full access when the job is linking it to your ads, because Google only lets an owner make that link.
Could your business get locked out?
Answer five quick questions about your own setup. Your answers stay on your device.
Do two people on your own team have Admin access to Google Ads?
Is someone on your team the primary owner of your Business Profile?
Does every helper sign in with their own email, not yours?
Have you removed everyone who left or stopped working with you?
Is 2-Step Verification turned on for every admin login?
Your access is in good shape. Check the user lists again whenever someone joins or leaves, because that's when gaps open.
You're close. Fix the first question you answered No this week, and start with a second admin if you only have one.
Start with one fix today: add a second admin from your own team to Google Ads. Then work through the setup checklist this week.
Set up access the right way this week
Tick each one off as you go. Your ticks stay on this device.
0 of 7 done
If you've already shared a password
Change the password today, then check the list of users on each tool for anyone you don't know. In Google Ads, look under Admin, then Access and security, and remove anyone who doesn't belong. Turn on 2-Step Verification while you're there.
If you see changes you didn't make, such as a new user, a new manager link or a budget you never set, report the account to Google as compromised right away. Google's help asks for the times of those changes from your change history, so write them down before you file the report.
If the request came by email, our guide to Google Ads phishing emails shows how to tell a real Google email from a fake one in about thirty seconds.
How we handle access when we run your ads
We ask to be added as a user on each Google tool, so we have no reason to ask for your Google password or a sign-in code. On Open Spots Search: “It’s your own Google Ads account, set up under our manager account. The ad account and its call data are yours either way.” On our other plans: “The Google account is in your business name. We build and manage it. If we ever part ways, you keep the account and the call data.” For your Business Profile, we ask for Owner, the middle of Google's three levels, and the primary owner seat stays with you.
Access is one of the checks in our PPC audit checklist, which shows the rest of what we look at in an account review.
If you'd like a hand sorting out who owns what, book a call with Miguel. He'll walk through which Google tools you have and who can get into each one.
Questions people ask
How do I give someone access to my Google Ads account?
Sign in as an admin, go to Admin, then Access and security, and click the plus button. Enter the person's email, pick an access level and select Send invitation. They accept from the email Google sends them.
What access level should I give my agency in Google Ads?
Most agencies link their manager account to yours, and your admin accepts the request on the Managers tab. If you add a person instead, Standard covers editing campaigns. Keep Admin with two people on your own team.
Why can't I add a user to Google Ads?
Only an admin can add users. If you don't see the plus button under Access and security, ask an admin on the account to add you or raise your access level. On an account with more than 3 admins, a second admin may also need to approve the new user.
How do I remove someone's access to Google Ads?
Go to Admin, then Access and security, find the person and select Remove access in the Actions column. An admin on your account can also unlink an agency's manager account.
See how we run Google Ads accounts
Read next
- Call Log Template: What to Write Down From Every CallA ready-to-copy call log, the one question to ask every caller, and how to sort wrong numbers.
- ChatGPT Custom Instructions Examples: Make Each Fix Only OnceEight custom instructions examples to copy, and a four-line card that carries your fixes into every chat.
- ChatGPT Prompt Templates: Write the Weekly Ask Once and Save ItCopy-ready ChatGPT prompt templates for the jobs you run every week, and how to save each one.