Step-by-step guide
Last updated: August 2026
Have these ready — it's what onboarding stalls on:
Grant the minimum the work needs. On Google Search Console, the levels are:
| Access level / role | What it can do |
|---|---|
| Owner | Full control including adding users and settings. You keep this. |
| Full user | See all data and take most actions (submit sitemaps, request indexing). Typical for an SEO agency. |
| Restricted user | View most data, limited actions. Good for reporting-only access. |
1–2 minutes. Add the user; access is immediate.
Open Settings → Users and permissions and grant the access — a few minutes.
Accept and confirm from their side, then start work.
Access is granted when:
The most common problems and how to fix them:
Verifying makes them an owner independent of you. Instead add them as a Full or Restricted user under Users and permissions.
Search Console separates domain and URL-prefix properties. Add the agency to the property that matches how the site is verified.
You add the agency by their Google email as a user — never a password. Owners stay in control; user access is removable instantly.
Everything above is why agencies switch to a single link. HandItSafe requests exactly this Google Search Console access for you — the client approves through Google Search Console's official process in about three minutes, no password shared, and keeps a panel to remove it anytime. When the engagement ends, removing access is one tap with a full log.
FAQ
No. You add the agency by their Google email as a user with the permission level you choose.
Full lets them use most features and manage settings; Restricted is view-mostly. Grant what the work requires.
Yes, instantly from Users and permissions. HandItSafe shows it in the client panel too.
Full user — it lets them submit sitemaps and request indexing, which SEO work needs. Restricted is view-mostly.
No. Owners can add and remove other users. Keep ownership; grant Full user instead.
Keep reading
HandItSafe requests exactly this access in one link. No passwords. Your client keeps a panel to remove it anytime.