Google Business Profile Ownership and Agency Access for German Companies

A Hamburg dental laboratory changes marketing agencies, but the old provider still controls the profile and the new team has only a shared password.

Suggested slug: /guides/google-unternehmensprofil-zugriff-agentur-inhaber-deutschland

Why this issue matters to a German local business

A Hamburg dental laboratory changes marketing agencies, but the old provider still controls the profile and the new team has only a shared password. No one knows which employee is the primary owner or how to recover access if a staff member leaves.

A profile is a business asset, so control should not depend on one individual’s personal account or an agency relationship that has ended. Clear ownership reduces the risk of lost access, unapproved edits, and delays during urgent opening-hour changes. Agencies can perform legitimate work without becoming the only party able to manage the business record.

A field-tested workflow

Review the people and groups with access, identify the current primary owner, and confirm that the business can sign in independently. Invite each authorised person through Google’s supported role system instead of sharing credentials. Agree which tasks an agency may perform, who approves sensitive changes, and how access will be removed at contract end. Test account recovery and document the procedure without storing passwords in a shared article or spreadsheet.

Evidence and accountability

Maintain a private access register containing each authorised user, role, business reason, approval date, and review date. Record agency start and end dates, but never include passwords, recovery codes, or personal identity documents in the register. At quarterly review—or when staff change—compare the register with the live access screen and remove permissions that are no longer required.

Risks to avoid

Do not remove the only working owner before confirming that an authorised successor has access. Avoid using one shared login across a whole team; shared credentials make it difficult to attribute changes and secure the account after a departure. A service provider should not threaten to withhold a business’s profile as leverage in a commercial dispute. Follow the official process if ownership is contested.

Implementation checklist

Confirm the business can sign in independently.
Assign individual accounts through supported access roles.
Document approval and removal steps for agencies and staff.
Review the live access list after every organisational change.

A practical handover between company and agency

At the start of a contract, record which party drafts edits, who approves changes, and who handles urgent incidents. At the end, confirm that the business owner can sign in, that billing and recovery details are under appropriate control, and that agency access is removed or retained only by agreement. A handover is complete when the company can operate the profile without asking the former supplier for credentials.

Measurement and review cycle

The meaningful result is that an authorised company representative can manage the listing, while each supplier has only the permissions needed for its work.

Frequently asked questions

Should an agency be the primary owner?

Choose ownership deliberately and ensure the business retains practical control. The correct arrangement depends on the account and current Google role rules, but the company should not rely on a former provider for routine access.

Use individual authorised accounts and supported roles instead. Individual access improves accountability and makes departures easier to handle.

What if the former agency refuses to transfer access?

Keep the contract and business evidence, request a documented resolution, and follow Google’s official ownership request process. Avoid creating a duplicate profile as a shortcut.

How often should permissions be reviewed?

Set a recurring review and repeat it immediately after a departure, agency change, acquisition, or suspected account compromise.

Germany-specific implementation example

In the Hamburg dental laboratory scenario, examine the real customer journey associated with profile access governance. For access governance in Hamburg dental laboratory, ask an outside tester to follow the relevant public route and compare it with the current operating procedure. Document any mismatch in the access governance workflow, correct the underlying fact, and then test the public result again. This Hamburg dental laboratory example illustrates one possible access governance workflow; the final decision must reflect the individual business and its account settings.

Official-source check

Verify current Google owner and manager role instructions before changing access. Ownership disputes and ordinary permission updates may require different steps. Google’s published guidance and available controls for profile access governance may change, so confirm that the linked help material matches the current account and business type before acting. The linked help material is a starting point for access governance; verify the live instructions before relying on it for this case. This guide to access governance offers operational guidance rather than a promise of rankings, approval, reinstatement, or commercial results.

Implementation record

The access record should list individual authorised accounts, their roles, the business reason for access, the approval date, the review date, and the action taken when a role ends. For Hamburg dental laboratory, keep the record proportionate to the task, limit access to staff who need the information, and avoid retaining unnecessary customer details. Close the access governance task only after comparing the public result with the actual operation.

Additional operational consideration

The business should rehearse a basic recovery scenario: the primary owner is unavailable and an urgent hours correction is needed. Another authorised person should know where to find the profile, how to sign in securely, and how to contact support if access fails. This exercise can reveal that the register is outdated or that the only recovery method belongs to a former employee. Fix those gaps before a real incident occurs.