Integrations · Google
Get your agency added to a client's Search Console
Google offers no way for an app to add a Search Console user below Owner, and a link never asks for Owner. So the client signs in once for reporting, then the link shows them the exact three clicks to add your email at Full or Restricted — and tells you when they say it's done.
Google Search Console at a glance
- How access is granted
- Guided. The client adds you by hand, with the steps and the level you chose shown on the link.
- Permission levels
- Full or Restricted. Owner is never requested.
- What your client needs
- Owner on the Search Console property (verified or delegated).
- Reporting
- Automatic once the client signs in: queries, clicks, impressions, CTR and position.
- Feeds into Agency Pilot
- Top 50 queries and top 25 pages on the client dashboard, and search clicks in Mission Control.
- Data delay
- Google publishes Search Console data 2–3 days late. Dashboards say which day the data runs through.
What your client does
On the onboarding link you send. No password is ever asked for or shared.
- 1
Opens the link and connects Google, which lets Agency Pilot read Search Console reports for the site.
- 2
Follows the steps shown for adding your agency: Settings → Users and permissions → Add user.
- 3
Enters the email address the link shows, picks the level the link names (Full or Restricted) and clicks Add.
- 4
Marks the step done on the link so you're notified.
What happens on your side
- Search Console reporting connects the moment the client signs in — no waiting for the manual step.
- The step shows your agency's email and the permission level, so there is nothing for the client to guess.
- You see the step's status on the link and in Connected accounts.
Search Console permission levels
| Role | What it allows | On an Agency Pilot link |
|---|---|---|
| Owner | Full control, including adding and removing users and changing settings. Verified owners proved ownership; delegated owners were added by one. | Never offered |
| Full | View all data and take most actions, such as submitting sitemaps and requesting indexing. | Offered — usual for SEO work |
| Restricted | View most data. Cannot take actions. | Offered — for reporting only |
Adding a user in Search Console
- 1
Open search.google.com/search-console and choose the property from the menu at the top left.
- 2
Click Settings in the left menu, then Users and permissions.
- 3
Click Add user.
- 4
Enter the agency's email address and choose Full or Restricted.
- 5
Click Add. Access starts immediately — there's no invitation to accept.
Domain properties and URL-prefix properties are separate. If the client has both, add the agency to the one you'll report on (usually the Domain property).
What the Search Console connection feeds
- Search clicks and impressions on the client dashboard, by day.
- Top 50 search queries and top 25 pages for the period, with clicks, CTR and average position.
- The Search clicks tile in Mission Control and the client portal.
- SEO audits and monthly reports that roll up organic performance.
Exactly what we ask Google Search Console for
A link only requests the permissions the platforms on it need. Nothing here is used for anything other than the reason next to it. More on how we handle access.
| Permission | Why |
|---|---|
| webmasters.readonly | Reads search performance for the client's site. Read-only; Google classes it as non-sensitive. |
| openid, email, profile | Labels which Google login the connection belongs to. |
Removing access later
- 1
Settings → Users and permissions → the three dots next to your agency's email → Remove access.
- 2
The reporting connection ends from Onboarding → Connected accounts or from the client's Google Account third-party connections.
If something doesn't work
The client can't find Users and permissions
They're not an owner of the property. Ask them to check Settings → Ownership verification, or have the owner open the link.
The property shows no data
New properties take a few days to collect data, and Search Console reports lag 2–3 days. Check that the property matches the site (www vs non-www, http vs https) or use a Domain property.
You were added but can't see the property
The client added a different email from the one on the link. Ask them to remove it and add the address shown on the step.
Google Search Console: common questions
- Why isn't Search Console fully automatic like Google Analytics?
- Google's Search Console API can only add owners, and handing an agency ownership is not something a link should ever ask for. So we automate the reporting and guide the one manual click.
- Full or Restricted — which should I ask for?
- Full if you'll submit sitemaps, request indexing or use the URL inspection tool. Restricted if you only need to read the data.
- Do I need to verify the site myself?
- No. Being added as a Full or Restricted user gives you access without verifying. Verification is only needed to become an owner.
- Does the client need to do anything for reporting to work?
- Just sign in on the link. Reporting uses that connection and doesn't depend on the manual step.
Keep going
Related integrations
Get Google Search Console access without chasing logins
One onboarding link covers every platform your client uses. Start a free trial and send your first link today.
Plan Search Console agency access around the delivery work
An access request is easiest to approve when the client understands the work it enables. For Google Search Console, start with the correct Search Console property, distinguishing a Domain property from a URL-prefix property. Write down the first task your team will perform and the person responsible for it. A reporting review, a configuration change and ongoing management can require different permissions. Put that purpose in the onboarding brief before sending the link, so the client has a concrete reason to approve the request and knows who to contact if something is unclear.
The intended recipient is the exact agency Google email shown in the onboarding instructions. Check that identity with the person who will actually do the work. An account name alone can be ambiguous when an agency has several teams or the client has several businesses. Record the intended asset and recipient together. This small preparation step makes a later missing-access question much easier to resolve because both parties can compare what was requested with what was granted. It also helps the next account manager understand why the connection exists.
A practical Google Search Console handover example
Illustrative example: An SEO agency reviewing a website migration could request Full access to the agreed property and keep a record of the old and new URLs. First establish which search history belongs to each property. Do not diagnose a traffic loss by comparing a whole-domain view with a narrow URL prefix.
For the migration example, completion evidence includes the exact property identifier, the agency email in Users and permissions and the intended Full role. Separately confirm the latest date available in the reporting connection. Ask the SEO specialist to document which old and new URLs will be checked and which property covers each. A click total from one view should not become the baseline for a different scope. Keep any website-editing or redirect work assigned to the appropriate developer rather than treating Search Console access as hosting access.
Separate account access from a successful implementation
A Search Console connection does not guarantee indexing or rankings. Access to a URL-prefix property does not imply access to another protocol, subdomain or separate Domain property.
After access is available, agree a small, observable first task in Google Search Console. For a review engagement, that might be opening the expected account information and documenting what will be assessed. For implementation work, it might be locating the intended setting without changing it yet. Do not test a permission by making an unnecessary live change. If a real change is required, use the client’s agreed approval process and record what you changed, why it was needed and how the result will be checked.
Keep the Google Search Console connection useful after onboarding
Read clicks, impressions, click-through rate and average position together. Changes in the mixture of queries and pages can alter an average even when an individual priority page behaves differently.
Revisit the access arrangement when the scope changes, the client adds another business asset or the delivery team changes. Ask whether the existing permission still matches the work and whether someone who no longer serves the client still has access. Keep the review proportionate: a small one-off project may need only a clear closing check, while ongoing management benefits from a repeatable review point. The useful outcome is a current record of who can do what on the intended Google Search Console asset, with the business owner able to understand that record.
Frequently asked questions
What should I confirm before requesting Google Search Console access?
Confirm the correct Search Console property, distinguishing a Domain property from a URL-prefix property. Ask the client to identify the account they actually use for the work in scope, rather than choosing from a familiar-looking name. Also agree whether the immediate objective is assessment, configuration or ongoing delivery. These details determine which permission is reasonable and what your team will check afterward. If the client is unsure which asset belongs to the project, resolve that ownership or account-selection question before they approve access to an unrelated account.
Who should complete the client side of the request?
The request needs a verified or delegated owner of the selected Search Console property. Send the instructions to that person or ask the client to involve them. A staff member who can read a dashboard may still lack permission to invite an agency. Repeating the same request with the same insufficient role will not fix that distinction. The authorized person should review the requested asset, recipient and permission before proceeding, and retain their own independent access after the agency is added.
Which Google Search Console permission is appropriate for the work?
Restricted fits reading search data; Full is appropriate when the engagement includes actions such as submitting sitemaps. The onboarding link does not request Owner access. Start by naming the actions the agency must carry out, then match the role to those actions. If the team only needs to inspect Google Search Console, explain why a viewing role may be sufficient. If a later task requires more authority, make that a deliberate scope decision with the client. Avoid requesting the broadest available role simply to prevent a possible future question; the current engagement should explain the permission being requested.
Is this an automatic grant or a guided client step?
The client connects Google for reporting, then manually adds the agency as Full or Restricted in Users and permissions. Marking that step complete reports the client action; it does not replace verification by the agency. Read the status in the context of that workflow. An invitation, a client confirmation and usable Google Search Console access are related milestones, but they do not always happen at the same moment. Assign responsibility for the next step before marking delivery as ready. This prevents an agency teammate from arriving at a scheduled task and discovering that a required acceptance or platform action is still outstanding.
Which agency identity should receive access?
Use the exact agency Google email shown in the onboarding instructions. Verify it before creating or sending the onboarding request, especially when the agency works through more than one account. Ask the actual recipient to confirm the identity they will sign in with. A forwarded email or a similar display name is not reliable proof that the correct account has been added. For a staffing change, arrange the replacement person’s appropriate access and remove obsolete assignments through the relevant platform process.
How do we verify that onboarding is complete?
After the platform action, open Search Console as the agency user, select the agreed property and confirm that its domain or URL prefix matches the production website. Record who performed that check and whether any required work remains blocked. Prefer a harmless viewing check over an unnecessary live edit. If a teammate cannot reach the asset, compare the actual recipient and role with the original request before asking the client to start again. Completion should mean the right person can reach the intended asset with the agreed capability, rather than only that a message or notification was received.
Does connecting Google Search Console also connect reporting?
The reporting connection provides search clicks, impressions, queries and pages independently of the manual user-addition step. Search data has a publication delay, so check the latest available reporting day. Keep the client’s reporting expectation explicit in the service brief. If a metric is needed for a report, identify its source, date range and definition before promising that it will appear. A successful access step establishes only the capabilities described for this particular integration. It should not be used as evidence that another platform, a separate dataset or an unrelated source of business results has also been connected.
What should we check if the requested account is unavailable?
If Users and permissions is unavailable, involve the property owner. If the agency cannot see the property, compare the email that was actually added with the one specified on the link. Start with account identity and authority because those determine what the client can share. Write down the exact stage where the flow stopped rather than repeatedly recreating the same request. If Google Search Console shows an account-specific restriction, the appropriate platform administrator may need to resolve it first. Avoid broadening permissions or switching to another asset just to make a completion indicator appear; verify the intended account instead.
Why does the connection use a manual Full or Restricted step?
The onboarding flow avoids requesting ownership just to automate agency access. It connects reporting through the client authorization and gives the client instructions for adding the agency with the chosen user permission. That distinction is intentional. Verify the manual user addition independently, because reporting can already be working while the agency still cannot open the property under its own Google login.
Should we use a Domain property or a URL-prefix property?
Choose the property that matches the reporting scope agreed with the client. A Domain property and a URL-prefix property are separate objects, so compare their coverage before using their totals interchangeably. Record the exact property selected and any narrower views used for analysis. If several properties are relevant to a migration or a subdomain project, verify access and interpretation for each.
Does Full access mean the agency owns the website?
No. The link requests a Search Console user permission, not ownership of the website or the business. It does not grant registrar, hosting or CMS access either. If the SEO engagement needs website changes, coordinate the appropriate separate website invitation. Keep the distinction clear in the client brief so the client knows which systems the agency can actually operate.
How should delayed search data be presented to a client?
State the latest available reporting day and compare periods that contain comparable data. The product describes a publication delay for Search Console, so the most recent calendar days may not be complete. Avoid calling that gap a traffic collapse. If investigating a change, preserve the property, date range and query or page filters so that another teammate can reproduce the same view.
Will adding the agency make new pages rank or index?
Access lets the agency inspect data and, with the appropriate role, use supported Search Console actions. It does not establish that a page is eligible, indexed or well ranked. Treat technical diagnosis, content work and performance measurement as separate delivery tasks. Document the page and observed issue before taking action, and explain the actual evidence rather than promising a ranking result from the connection.
How do we end access when the engagement finishes?
Remove the agency user from Search Console Users and permissions, and disconnect the Google reporting authorization separately. Any ownership verification arranged outside this flow needs its own review. Agree a handover point before removing access that is still needed to finish approved work. Confirm the business retains the people and permissions it needs after the agency leaves. Keep permission removal separate from decisions about delivered work or historical reporting data; those are different questions. Record which Google Search Console assignments were removed and which, if any, remain for an explicitly agreed support period, with a clear owner for the final review.
What is a sensible next step after verifying Google Search Console access?
Inspect the agreed property and document the search-performance period, relevant pages and migration or indexing question being investigated. If the task requires website changes, coordinate the separate CMS or hosting permission with the developer. For reporting, align the property scope and available data-through date before comparing periods. The useful first deliverable is a specific search diagnosis with reproducible page or query context, rather than a promise that gaining access will itself change indexing or rankings.
