You are ending an agency contract, you log in to check something, and the only administrator on your Google Ads account is an email address at the agency. Then you look at Analytics, Tag Manager and Search Console, and the pattern may repeat. When an agency won't give Google Ads access, or simply has not answered yet, the fear is rarely about principle. It is about ads that might stop, charges that might keep running, and years of campaign and reporting history that could stay behind when you leave. The good news is that Google documents how ownership and access work in each of these products, and the rules are more specific than "whoever has the password." The first job is not a hard conversation with the agency. It is finding out, product by product, who holds what, and you can do that today without removing anyone.
Key Takeaways
Record the customer ID, account and property IDs, every administrator and owner, and the billing contact for Ads, GA4, Tag Manager and Search Console before you end service or remove anyone.
Request Admin on the Ads client account, Administrator in GA4, Account Administrator plus container Publish in Tag Manager, and verified or delegated owner in Search Console.
An Ads client account keeps its own campaign history when a manager is unlinked, and a moved GA4 property keeps its reports, but any brand-new account starts from zero.
Know Exactly Who Controls Each Account in Fifteen Minutes
Before you write to anyone, find out where you stand. Each of the four Google products has its own access model, so "I have access" can mean very different things depending on which screen you are looking at. A short, dated record of who holds each role gives you something specific to ask for and something to point to later. It also shows you whether there is a problem at all, because sometimes the business already holds enough access and simply never looked.
Start with the Google Ads customer ID and your own access level
Your Google Ads account has a customer ID, and that number is what everyone, including Google support, will use to identify it. In Ads, open Admin, then Access and security, and read the list of users. Google Ads has five access levels in a Google Ads account: Email-only, Billing, Read-only, Standard and Admin. Only Admin can change who has access and accept or unlink manager accounts. Billing access is not control: a Billing user can edit billing information but cannot manage users or campaigns. If your email shows anything below Admin, you do not yet control the account.
Find out who accepted the terms when the account was created
This is the part that decides how strong your position is, and it cuts both ways. Answers from Google's own Ads help community point to the person who accepted the Google Ads terms when the account was opened as the one with a real claim to control it. If you, or someone at your company, created the account and accepted those terms, you are in a strong position. If the agency created it under its own login and accepted the terms itself, the business is not automatically in the right by default, and what the agency must hand over may depend on your agreement. Knowing which of those you are dealing with tells you whether to ask, to verify, or to get advice.
Record which email holds admin in the other three products
Repeat the same check in Google Analytics, Tag Manager and Search Console. You are looking for the email addresses at the top of each permission list, and whether any of them belong to your company. Take screenshots with the date visible.
The fifteen-minute access and billing check
- 1
Minutes 1 to 4, Google Ads
Admin, then Access and security. Note the customer ID, each user's access level, any manager accounts, whether a manager is listed as owner, the billing setup and the payments profile contact.
- 2
Minutes 5 to 7, GA4
In Admin, record Account access management and Property access management, the property ID, the data stream and any linked products.
- 3
Minutes 8 to 10, Tag Manager
In Admin, record Account User Management and Container User Management, the container ID, every Account Administrator and who has Publish.
- 4
Minutes 11 to 13, Search Console
In Settings, record Users and permissions and Ownership verification, including how the property was verified.
- 5
Minutes 14 to 15, confirm and capture
Check whether two company-controlled administrators exist in each product, and save dated screenshots. Do not remove the agency during the check.
The last line matters more than it looks. Removing an agency user before you hold your own administrator role can leave an account with nobody able to manage it, and in one product that has a hard deadline attached.
Get the Right Role in Each Google Product
Once you know who holds what, the request becomes specific. The word "admin" does not mean the same thing across these tools, so a request for "admin access" or "the login" can leave you with less control than you think. The table below gives the role to ask for in each product. After it, each product gets its own short plan: what to ask for in writing, and what to do if nobody answers.
| Product | Role to request | What it lets you do | If nobody responds |
|---|---|---|---|
| Google Ads | Admin on the client account | Manage users, accept or unlink manager accounts | Google's Account Access Request form, with proof of ownership, when no active admins exist and contact is not possible |
| Google Analytics 4 | Administrator | Full control of the account or property, including users | No documented bypass; a property move needs Administrator and Editor roles in both accounts |
| Tag Manager | Account Administrator, plus Publish on the container | Manage users and publish tag changes | Google support cannot add users to a locked-out account |
| Search Console | Verified owner, or delegated owner | Manage users and settings for the property | Verify ownership yourself through DNS or a site token |
Google Ads: Admin on the client account, and a clear look at any manager link
Ask the agency, in writing, to add your company email as Admin on the Google Ads client account itself, not only on the agency's manager account. A Google Ads manager account (also called an MCC) lets an agency run many client accounts from one login, and a manager can be listed as the owner of your account. Google's page on ownership of client accounts says an owner manager has extra privileges, but these "do not take data ownership or administrative rights away from client accounts." In practice, once you hold Admin on the client account, you can unlink the manager yourself.
If the account has no active administrators and you cannot reach the agency, Google's sign-in help for Google Ads documents an Account Access Request form. It asks for proof that you own the account, which is where the terms question from the first section comes back. Billing needs its own step: when an agency's manager account pays for your ads, Google's process for changing who pays has to be started by the manager that currently pays, so the timing is not entirely in your hands.
Google Analytics 4: the Administrator role
GA4 has account roles and property roles, and an Administrator has full control, including managing users, according to Google's page on access and data-restriction management. Ask for Administrator at the account level if the whole account belongs to your business, or at the property level if the agency keeps several clients under one account. It helps to know how GA4 is organized: an account holds one or more properties, and a property holds data streams, as Google's GA4 account structure page lays out.
Google publishes no general bypass for a GA4 property that only the agency controls. Your route is the agency adding you, which any existing Administrator can do from the steps in Google's help on adding and editing Analytics users, or the agency moving the property to your own account, covered in the next section.
Tag Manager: Account Administrator plus container Publish
Tag Manager separates the account from the container. At the account level, a person is either an Administrator or a User. At the container level, permissions are Read, Edit, Approve and Publish. Ask for Account Administrator and Publish on the container, because an administrator who cannot publish still cannot push a fix live.
Google's page on Tag Manager users and permissions is direct about the limits. Google support cannot add users when an organization has been locked out, and Google recommends more than one administrator. It also warns that an account left with no administrator can be deleted automatically, after which remaining users with read access get 30 days to export the container from the trash. So, never let the last administrator leave before you are added.
Search Console: verified or delegated owner
Search Console has verified owners, delegated owners, full users and restricted users, per Google's page on owners, users and permissions. A verified owner is not handed a title. They prove control of the site with a verification token, such as a DNS record or a token placed on the site. Ask the agency to add you as a delegated owner, or verify ownership yourself.
This is the one product where you may not need the agency at all. Google says that if the only verified owner leaves, the incoming team should verify site ownership to regain access. If your business controls the domain's DNS or the website, that is often a quick job.
Keep Your History When You Change Agencies
What survives depends almost entirely on one question: are you keeping the original account, or starting a new one? Google's documentation is specific about each case, and the difference is large.
| Situation | What you keep | What you lose or leave behind |
|---|---|---|
| Unlink an agency manager from your Ads client account | The client account's own campaign history and Google Ads features | Nothing in the client account itself |
| Move a GA4 property to your own account | Reporting data, data streams, settings and property-level integrations | Change history from before the move stays in the old account |
| Start a new Ads, GA4, Tag Manager or Search Console setup | Nothing carries over | The new account starts its own record from day one |
| Tag Manager account left with no administrator | A container export from the trash, if a read user acts within 30 days | The original account |
For Google Ads, Google's help on unlinking accounts from a manager says unlinking an individual account does not remove its own campaign history or features, as long as the client account itself stays accessible. When a new agency takes over, it links its own manager account to your existing client account, a step Google describes in its help on transferring an existing client account. You do not need a fresh account for a new agency to start work.
For GA4, a property can be moved to another account, and Google's page on how to move a GA4 property says reporting data, streams, settings and property-level integrations go with it. The catch is the roles: whoever does the move needs Administrator and Editor roles in both the source and the destination account. A brand-new property cannot inherit any of the old reports.
That is why the order of steps matters so much. If talks with the agency fail and you have to start over, you keep going, but your new Ads account, GA4 property and Tag Manager container begin with no history, and a new agency would be starting from that point too.
Write the Handover Into Your Contract
Contracts matter here, and they are also where general guidance ends. The points below are general business information, not legal advice, and what you are owed depends on the agreement you signed and the law that applies to it. If your agreement is unclear or the agency disputes it, that is a question for a lawyer.
As general information, a clear marketing agreement tends to cover these points:
- Every account by name: Ads, GA4, Tag Manager, Search Console and any others, with their IDs, and whether the business or the agency creates each one.
- Who holds admin, and when: which party must hold administrator access throughout the engagement, not only at the end.
- The handover at termination: users and roles, account and property IDs, billing handoff, data exports, configurations, deadlines, the format, support hours and any fee.
- Campaign and tracking assets: creative, audiences, pixels, tags, tracking setup and data exports, plus whether the agency may keep access after the contract ends.
The American Bar Association's piece on key contract provisions in SaaS agreements says data ownership, access, retention, portability and the format of returned data should be addressed. It is written about software contracts, and it is not a rule that decides a dispute with a marketing agency, but the same questions apply. No U.S. regulator or technical standard located in the research behind this post sets a universal rule that a marketing client automatically owns every account an agency created.
Set Up New Accounts So You Always Hold the Keys
Whether you are starting fresh or simply want the next agency relationship to end cleanly, the setup is the same. Create everything from a Google account your company controls, protected by the business's recovery email and phone and by two-step verification.
From that account, create the Ads client account, the Analytics account and GA4 property, the Tag Manager account and container, and a Search Console Domain property. A Domain property covers the whole domain and is verified through DNS, as Google's help on adding a Search Console property explains. Add at least two internal administrators in each product, then invite the agency as named users or link its manager account. Keep billing and the payments profile under a business-controlled contact where you can.
Finally, write down the account IDs, property ID, container ID, Measurement ID, Search Console property, verification method and payments profile. Google recommends individual logins over shared passwords, so every person, inside or outside the company, gets their own access that you can remove on the day the work ends.
Decide Whether You Need Outside Help at All
You may not need anyone. If you already have an internal administrator in each product, verified ownership in Search Console, billing under your control and a written list of account IDs, you can likely handle the change yourself. The same goes for a new agency: it should be able to work inside your existing Ads client account and GA4 property rather than insisting on new ones for its own convenience.
Help starts to earn its cost when the map is messy. That means several accounts with no internal administrator, a manager account paying for your ads, tracking and linked products nobody has listed, or a change you cannot afford to get wrong while ads are running. Useful help here looks like an access audit, evidence capture, a review of the tracking setup and a planned transition. No one can promise to recover a Tag Manager account with no administrator, or to move a GA4 property without the roles Google requires, so treat any guarantee of that kind as a reason to ask more questions.
Do you know who holds the keys?
Pick an answer to begin.
1. Your email shows Billing access in Google Ads. What can you do with it?
2. You move a GA4 property from the agency's account to yours. What stays behind?
3. The only administrator on your Tag Manager account is about to leave. What should happen first?
Frequently Asked Questions About agency won't give google ads access
Who owns my Google Ads account if the agency created it?
It depends on the account setup and your agreement. Answers in Google's Ads help community point to whoever accepted the terms when the account was opened, and Google says an owner manager account does not take data ownership away from the client account. Check the users list and your contract.
Can I remove an agency from Google Ads?
Yes, if you hold Admin on the client account. Confirm how billing is set up before you unlink the agency's manager account, so your ads do not stop unexpectedly.
Will switching agencies erase my Google Ads history?
Not if you keep the same client account. Google says unlinking a manager does not remove the client account's own campaign history.
Can I transfer Google Analytics to a new agency without losing reports?
If the GA4 property is moved, Google says reporting data moves with it, though change history from before the move stays in the source account. A new property starts empty.
What if nobody is an administrator in Tag Manager?
Google support cannot add users to a locked-out account. An account with no administrator can be deleted, and remaining read users get 30 days to export the container from the trash and import it elsewhere.
How do I get Search Console back from my old agency?
Ask a current owner to add you, or verify site ownership yourself through DNS or a verification token on the site.
The Bottom Line
Start by finding out who holds each role in Ads, GA4, Tag Manager and Search Console, and record it before anyone is removed. Then ask in writing for the specific role each product needs, rather than a password. Keeping the original accounts is what keeps your history, while any fresh start begins from zero. Your contract may shape what the agency has to hand over, so treat that part as a question for your agreement, not for Google.
Once your business holds its own administrator roles and a written list of account IDs, a change of agency becomes a routine task. You can bring someone new in, remove access when work ends, and keep every report you have paid for.
If you want a second set of hands, Web Leveling can help you work through it. With our internet marketing work, the analytics and tracking live in logins you hold, so the accounts leave with you if you ever go. We work with small and medium businesses across the country and overseas. Tell us which accounts you are trying to get back, and we will help you plan the handover.
Terms
Account access words in this post
Tap a term to see what it means.
Client account. The Google Ads account that holds your campaigns, billing and history.
Manager account. A Google Ads account, also called an MCC, that an agency uses to run several client accounts from one login.
Administrator. The GA4 role with full control of an account or property, including who has access.
Account Administrator. The Tag Manager role that can manage users for the whole account.
Container. The Tag Manager unit that holds a website's tags and their settings.
Verified owner. A Search Console owner who has proved control of the site with a DNS record or verification token.
Delegated owner. A Search Console owner added by a verified owner, without verifying the site themselves.
