Retainer Structure
The contract structure of the agency engagement. The document where ad account access governance should be written.
Read the entry →Stan Consulting · Marketing Atlas · Reference · Agency Burn
Ad Account Access.
The set of platform accesses (Google Ads, Meta Business Manager, GA4, Shopify Marketing) that determine whether the operator can audit the work the agency is doing on their behalf. The most-overlooked governance question in any agency relationship.
Section 02 · Quick definition
Definition.
Ad account access is the configuration of who can read, edit, and pay for advertising and analytics accounts that the agency operates on behalf of the client. The accesses that matter are the Google Ads master account (MCC), Meta Business Manager, GA4 admin role, Shopify Marketing channel access, and the conversion tracking tags installed on the operator's site. Each access decides who controls the asset when the relationship ends. The default in many agency engagements is to leave the asset in the agency's name. The default is the wrong default.
Section 03 · Why it matters
Why it matters.
Ad account access is the governance layer of the agency relationship. When the operator owns the account and grants the agency admin access, the operator can audit the work, export the history, and revoke access on the day the relationship ends. When the agency owns the account, the operator is renting access to their own marketing data and the agency holds the export key. The asymmetry is structural and is rarely discussed at the start of the engagement because the start of the engagement is when both sides are aligned and neither party wants to introduce friction.
The cost of getting access wrong shows up at termination. Operators have lost twelve months of conversion history, custom audiences worth six figures of training data, and the conversion tracking tags installed on their own site. The recovery is not a recovery; the data does not come back. The new agency builds new audiences, the new tracking is rebuilt from zero, and the operator pays for the rebuild on top of paying the new retainer.
The practical stake is that ad account access is a cheap thing to get right at the start of an engagement and an expensive thing to fix at the end of one. The conversation belongs in the contract, not in the offboarding email.
Section 04 · How it works
How ad account access actually flows.
Each major advertising and analytics platform has its own model for account ownership and access. Google Ads uses an MCC (My Client Center) that links a manager account to one or more sub-accounts, with admin and standard access roles. Meta Business Manager uses a Business asset model where the Business owns the ad account and grants partner access to the agency. GA4 uses property-level role assignments with admin, editor, and analyst roles. Shopify uses the marketing collaborator model with scoped permissions. Across all four, the pattern is the same: the operator's entity should be the account owner, and the agency should be a granted user, not the other way around.
-
Step one · account ownership at setup
The operator's legal entity creates the Google Ads account, the Meta Business Manager, the GA4 property, and the Shopify store. Each account is registered to an operator-owned email address and billed to an operator-owned card. The agency is granted access as a user, never as the owner. This is reversible only by deleting and rebuilding the asset, which loses history.
-
Step two · role assignment
The agency is granted admin access in Google Ads through MCC linking, partner access in Meta Business Manager, editor or admin role in GA4, and marketing collaborator access in Shopify. The operator retains the highest privilege role on every platform. A second operator-owned account is added as a backup admin in case the primary is locked out.
-
Step three · tracking and tag governance
Conversion tracking tags installed on the operator's site (Google Ads conversion tag, Meta Pixel, GA4 measurement IDs) are owned by the operator's containers, deployed through the operator's Google Tag Manager workspace. The agency is granted edit access in GTM. The tag is revocable on day one of offboarding without breaking the site.
-
Step four · offboarding readiness
The contract specifies that on termination the agency removes its users from the operator's accounts within five business days. The operator retains all ad accounts, audiences, conversion history, and creative assets. No data export request is required because no data ever moved; the operator owned the asset throughout. The transition to the next agency is a permission grant, not a migration.
The four steps add up to a few hours of setup work at the start. The cost of skipping them shows up only at the end of the relationship, which is exactly when the operator has the least negotiating power to fix it.
Section 05 · Common misunderstandings
What people get wrong.
-
“The agency runs ads better when they own the account.”
There is no operational difference in performance between an account the operator owns with the agency as admin and an account the agency owns with the operator as a guest. The difference shows up only at termination, when the ownership decision determines whether the asset stays with the operator or leaves with the agency.
-
“If we ever switch agencies we can just export the history.”
Conversion history, custom audiences, and learned bidding signals are not exportable as portable data. They are tied to the account. When the agency keeps the account, those assets stay with the agency. The operator can export reporting CSVs but cannot transfer the audiences or the bidding history that took twelve months to build.
-
“A new agency can rebuild the tracking quickly.”
A new agency can deploy new tracking, but the new tracking starts from zero. The fourteen-day attribution window, the audience seed, and the trained bidding signals all reset. The first sixty days of the new agency relationship are spent rebuilding what the previous arrangement already had, and the operator pays for the rebuild on top of the retainer.
-
“Read-only access is enough for audit.”
Read-only access is enough to read what the agency wants the operator to see. Auditing the work requires admin access to inspect change history, exclude lists, audience definitions, and bidding strategy parameters. Read-only access is the minimum for billing visibility, not for governance.
-
“Asking for ownership signals distrust.”
Asking for account ownership signals professional governance. The agencies that resist the request are signaling exactly the dependency they want to preserve. The conversation is far cheaper to have on the kickoff call than on the termination call.
Section 06 · Diagnostic questions
Questions a Stan Consulting diagnostic asks.
Whose entity owns the Google Ads account, Meta Business Manager, GA4 property, and Shopify store?
What level of access does the operator have on each platform: admin, editor, or read-only?
Are the conversion tracking tags deployed through the operator's Google Tag Manager or the agency's?
Is there a backup operator-owned admin user on every platform, in case the primary is locked out?
If the agency relationship ended on Friday, what would the operator lose by Monday?
Does the contract specify a five-business-day offboarding window for access removal and asset retention?
Have the conversion audiences, exclusion lists, and learned bidding signals been audited at any point in the engagement?
Section 07 · Related Atlas entries
Adjacent reading.
Section 08 · Five Cents
Losing ad account ownership during a relationship is the single most common agency-burn vector and the simplest to prevent. The agency rarely sets out to take the asset; the asset ends up in the agency's name because the agency set it up first and no one corrected the default. Two years later the operator finds out at termination that the audiences, the conversion history, and the trained bidding signals are not portable. The fix is a thirty-minute conversation on the kickoff call. The operator owns every account. The agency is a guest. The contract specifies the offboarding window. Every operator who has lost access wishes they had done this. Almost no operator does this until they have lost access once.
Stan · Marketing AtlasSection 09 · Sources
Sources.
- Google Ads Help · Manager accounts (MCC) overview Official documentation on how Google Ads manager accounts link to client accounts, the available access levels, and how account ownership is structured.
- Meta Business Help · Business Manager and ad account access Reference for how Meta Business Manager owns ad accounts and grants partner access to agencies, and how to reclaim ownership at offboarding.
- Google Analytics Help · Manage users and access Documentation on GA4 role assignments at account, property, and view level, including admin, editor, marketer, analyst, and viewer roles.
- Search Engine Land · Agency access rights and ownership Practitioner reference on the recurring access disputes between agencies and clients and the pre-engagement governance steps that prevent them.
- Search Engine Journal · PPC account ownership best practices Industry overview of how operators should set up paid-search accounts, with explicit guidance on retaining ownership and granting agency access.