Skip to main content Stan Consulting LLC · Marketing Atlas · Ad Account Access

Marketing Atlas · Reference · Operational

Ad Account Access.

Updated May 2026 · Reference route · written diagnostic

The set of platform accesses (Google Ads, Meta Business Manager, GA4, Shopify Marketing) that determine whether the operator can audit the work the agency is doing on their behalf. The most-overlooked governance question in any agency relationship.

Concept · reference page Revised 2026-05-15 Author Stan Tscherenkow

The numbers underneath

What this concept moves in the operational.

Operator must own the account · not the agency
Read-only audit access · non-negotiable
Master MCC · admin rights · vendor logs

The shift this concept produces

Before and after the operator applies the discipline named here. Source: SC install benchmarks across categories, 2024-2025.

Before applying this concept
22% baseline
After applying this concept
78% lift

Section 01 · Quick definition

Definition.

In one read

Ad account access is the configuration of who can read, edit, and pay for advertising and analytics accounts that the agency operates on behalf of the client. The accesses that matter are the Google Ads master account (MCC), Meta Business Manager, GA4 admin role, Shopify Marketing channel access, and the conversion tracking tags installed on the operator's site.

The structural read

Each access decides who controls the asset when the relationship ends. The default in many agency engagements is to leave the asset in the agency's name. The default is the wrong default.

Section 02 · Why it matters

Why it matters.

01

Origin.

Ad account access is the governance layer of the agency relationship. When the operator owns the account and grants the agency admin access, the operator can audit the work, export the history, and revoke access on the day the relationship ends. When the agency owns the account, the operator is renting access to their own marketing data and the agency holds the export key. The asymmetry is structural and is rarely discussed at the start of the engagement because the start of the engagement is when both sides are aligned and neither party wants to introduce friction.

02

Mechanic.

The cost of getting access wrong shows up at termination. Operators have lost twelve months of conversion history, custom audiences worth six figures of training data, and the conversion tracking tags installed on their own site. The recovery is not a recovery; the data does not come back. The new agency builds new audiences, the new tracking is rebuilt from zero, and the operator pays for the rebuild on top of paying the new retainer.

The load-bearing point

The practical stake is that ad account access is a cheap thing to get right at the start of an engagement and an expensive thing to fix at the end of one. The conversation belongs in the contract, not in the offboarding email.

Section 03 · How it runs

How ad account access actually flows.

Each major advertising and analytics platform has its own model for account ownership and access. Google Ads uses an MCC (My Client Center) that links a manager account to one or more sub-accounts, with admin and standard access roles. Meta Business Manager uses a Business asset model where the Business owns the ad account and grants partner access to the agency. GA4 uses property-level role assignments with admin, editor, and analyst roles. Shopify uses the marketing collaborator model with scoped permissions. Across all four, the pattern is the same: the operator's entity should be the account owner, and the agency should be a granted user, not the other way around.

01

Step one · account ownership at setup

The operator's legal entity creates the Google Ads account, the Meta Business Manager, the GA4 property, and the Shopify store. Each account is registered to an operator-owned email address and billed to an operator-owned card. The agency is granted access as a user, never as the owner. This is reversible only by deleting and rebuilding the asset, which loses history.

02

Step two · role assignment

The agency is granted admin access in Google Ads through MCC linking, partner access in Meta Business Manager, editor or admin role in GA4, and marketing collaborator access in Shopify. The operator retains the highest privilege role on every platform. A second operator-owned account is added as a backup admin in case the primary is locked out.

03

Step three · tracking and tag governance

Conversion tracking tags installed on the operator's site (Google Ads conversion tag, Meta Pixel, GA4 measurement IDs) are owned by the operator's containers, deployed through the operator's Google Tag Manager workspace. The agency is granted edit access in GTM. The tag is revocable on day one of offboarding without breaking the site.

04

Step four · offboarding readiness

The contract specifies that on termination the agency removes its users from the operator's accounts within five business days. The operator retains all ad accounts, audiences, conversion history, and creative assets. No data export request is required because no data ever moved; the operator owned the asset throughout. The transition to the next agency is a permission grant, not a migration.

The shift this concept names

Ad account access is the configuration of who can read, edit, and pay for advertising and analytics accounts that the agency operates on behalf of the client.

Before applying this concept

“The agency runs ads better when they own the account.”

After applying this concept

The contract specifies that on termination the agency removes its users from the operator's accounts within five business days. The operator retains all ad accounts, audiences, conversion history, and creative assets. No data export request is required because no data eve...

Section 04 · Common misunderstandings

What people get wrong.

Misunderstanding 01

“The agency runs ads better when they own the account.”

There is no operational difference in performance between an account the operator owns with the agency as admin and an account the agency owns with the operator as a guest. The difference shows up only at termination, when the ownership decision determines whether the asset stays with the operator or leaves with the agency.

Misunderstanding 02

“If we ever switch agencies we can just export the history.”

Conversion history, custom audiences, and learned bidding signals are not exportable as portable data. They are tied to the account. When the agency keeps the account, those assets stay with the agency. The operator can export reporting CSVs but cannot transfer the audiences or the bidding history that took twelve months to build.

Misunderstanding 03

“A new agency can rebuild the tracking quickly.”

A new agency can deploy new tracking, but the new tracking starts from zero. The fourteen-day attribution window, the audience seed, and the trained bidding signals all reset. The first sixty days of the new agency relationship are spent rebuilding what the previous arrangement already had, and the operator pays for the rebuild on top of the retainer.

Misunderstanding 04

“Read-only access is enough for audit.”

Read-only access is enough to read what the agency wants the operator to see. Auditing the work requires admin access to inspect change history, exclude lists, audience definitions, and bidding strategy parameters. Read-only access is the minimum for billing visibility, not for governance.

Misunderstanding 05

“Asking for ownership signals distrust.”

Asking for account ownership signals professional governance. The agencies that resist the request are signaling exactly the dependency they want to preserve. The conversation is far cheaper to have on the kickoff call than on the termination call.

Section 05 · Diagnostic questions

Questions a Stan Consulting diagnostic asks.

Whose entity owns the Google Ads account, Meta Business Manager, GA4 property, and Shopify store?

01

Whose entity owns the Google Ads account, Meta Business Manager, GA4 property, and Shopify store?

02

What level of access does the operator have on each platform: admin, editor, or read-only?

03

Are the conversion tracking tags deployed through the operator's Google Tag Manager or the agency's?

04

Is there a backup operator-owned admin user on every platform, in case the primary is locked out?

05

If the agency relationship ended on Friday, what would the operator lose by Monday?

06

Does the contract specify a five-business-day offboarding window for access removal and asset retention?

07

Have the conversion audiences, exclusion lists, and learned bidding signals been audited at any point in the engagement?

Stan's take . four chunks

01

Losing ad account ownership during a relationship is the single most common agency-burn vector and the simplest to prevent. The agency rarely sets out to take the asset; the asset ends up in the agency's name because the agency set it up first and no one corrected the default.

02

Two years later the operator finds out at termination that the audiences, the conversion history, and the trained bidding signals are not portable. The fix is a thirty-minute conversation on the kickoff call.

03

The operator owns every account. The agency is a guest.

04

The contract specifies the offboarding window. Every operator who has lost access wishes they had done this. Almost no operator does this until they have lost access once.

Stan Tscherenkow · Principal · Stan Consulting LLC

Section 06 · Adjacent concepts

Related Atlas entries.