Local SEO
Controlling Owner and Manager Access to Google Business Profiles
Controlling Owner and Manager Access to Google Business Profiles: practical, policy-aware Google Business Profile guidance for businesses operating in the…
By Chamko Research Team Updated 4 min read
Quick answer
Controlling Owner and Manager Access to Google Business Profiles: practical, policy-aware Google Business Profile guidance for businesses operating in the…
Executive summary
A Business Profile can become difficult to manage when the only person with access leaves, a marketing contractor keeps control after a contract ends, or several employees share one password. These are governance failures rather than SEO problems. Philippine businesses that rely on one profile for calls, directions, bookings, or reviews should treat account access as an operational asset.
Google provides owner and manager roles. Owners have broader control, including managing users and removing profiles; managers can handle many day-to-day tasks but cannot add or remove users or remove the profile. A profile can have multiple owners, but only one primary owner. Review the current role descriptions before assigning access because permissions determine who can make consequential changes.
Keep ownership with the business
The owner or an authorized representative should maintain control. An agency can help with posts, review replies, and routine data updates without becoming the only person able to recover the listing. Avoid using a shared password in a spreadsheet or chat thread. Each authorized person should use their own Google Account and receive the minimum role needed.
For a family-run restaurant in Bacolod, the proprietor may remain primary owner, the operations lead may be an owner if that responsibility is justified, and an external marketing team may be managers. The exact structure should reflect trust and responsibility, not seniority alone.
Use a joiner-mover-leaver process
When someone joins the team, define which profile tasks they need to perform and grant the appropriate role. When their job changes, reassess the permission. When they leave, remove access promptly and check whether they control other business assets such as the website, booking system, or analytics account.
A practical offboarding record should include the person’s name, profile or location group affected, role, date access was removed, and internal approver. Do not leave an ex-employee with access because “they probably will not use it.” A former contractor may still be able to change a phone number, edit hours, or respond publicly.
Avoid password sharing and account dependency
Password sharing creates uncertainty about who made a change and complicates recovery when an account is compromised. It also makes it harder to revoke one person’s access without affecting everyone else. Use individual account invitations and maintain current recovery options for the owner’s account.
If the only primary owner is unavailable, follow Google’s official ownership-request process. Do not create a second listing as a workaround. An existing verified profile may already represent the business, and duplicates can confuse customers or become ineligible to appear.
Define approval levels for sensitive edits
Not all changes carry the same risk. A manager might be authorized to correct a typo in a holiday schedule, while a move to a new address, business-name change, or primary-category change requires owner approval. Write a short rule describing which changes need a second review.
For a clinic network in Metro Manila, a branch manager could confirm that a practitioner’s schedule has changed, but only the designated operations owner might approve changes to the branch’s identity or location. This avoids both extremes: allowing everyone to change everything or forcing a central executive to approve every minor correction.
Agency relationships and client transparency
An agency should explain what access it needs and why. The client should know who currently has access, which services are being performed, and how access will be handled at contract end. Do not make ownership transfer conditional on a new service purchase or use a client’s profile as leverage in a payment dispute.
At the beginning of an engagement, record the primary owner, invited users, current business facts, and approved scope. At handover, identify outstanding edits, scheduled content, and unresolved profile warnings. This is especially important when one agency manages dozens of Philippine branches.
Audit access twice a year
Create a periodic user review. Confirm that every listed owner or manager still has a legitimate role, that the primary owner is an appropriate business representative, and that former vendors have been removed. Review account security separately, including two-step verification and recovery methods where available.
The review should be based on current users rather than assumptions about who “must” have access. A former staff member may still be listed even if the team believes the account was transferred. Record the audit date and the person who approved the final access list.
Example: a salon in Quezon City
A salon’s former freelancer still manages the listing and is the only owner. The current proprietor asks for control but cannot find the original login. The correct response is to use Google’s access and ownership process, verify the business’s relationship to the profile, and keep the existing profile rather than opening a replacement. After access is resolved, the proprietor documents the roles and adds a trusted backup.
Frequently asked questions
Should an agency be the primary owner?
The business should retain appropriate control. Assign roles according to actual responsibility and Google’s current rules.
Can managers remove other users?
Google’s role guidance distinguishes managers from owners; managers generally cannot add or remove profile users.
What if a former employee refuses to hand over access?
Use the official ownership-request or account-recovery process and provide genuine evidence when requested. Do not retaliate by creating duplicate profiles.
How often should access be reviewed?
Review after staff or agency changes and include a scheduled periodic audit.
Conclusion
Access control protects the business’s ability to communicate with customers. Use individual accounts, retain owner-level control, remove obsolete users, and require approval for identity or location changes. These controls reduce the chance that a routine staffing change becomes a public listing crisis.
Official references
- Google Business Profile: Manage owners and managers
- Google Business Profile: Resolve duplicate profiles and ownership issues
- Google Business Profile: Business eligibility and ownership guidelines