Advertising · Integration
Last updated: August 2026
GA4 property-level user management — the agency is added as a user with a chosen role, using their Google account. You'll find it under Admin → Property → Property access management. The client keeps ownership of Google Analytics 4 properties; the agency is granted only what you assign.
Grant the least access the work needs. Here's what each level on Google Analytics (GA4) can do:
| Access level / role | What it can do |
|---|---|
| Viewer | See reports and configurations; no changes. |
| Analyst | Viewer plus create and edit explorations, audiences and comparisons. Common for reporting agencies. |
| Editor | Full control of settings except user management. Common for agencies building the setup. |
| Administrator | Everything including managing users. Grant sparingly. |
1–2 minutes. Add the user and choose a role; access is immediate — no acceptance step needed on their side.
You add the agency by their own Google email — never your password. Access is scoped to the property and role you choose and is removable instantly. The agency logs in with their own Google account and 2FA.
Every step above is why agencies move to a single link. HandItSafe requests exactly the Google Analytics (GA4) access you need — the client approves it through Google Analytics (GA4)'s own process in about three minutes, no password shared, and keeps a panel to see and remove access anytime. That visibility is why clients approve faster, and it makes offboarding a one-tap job later.
Read the full step-by-step guide to giving Google Analytics (GA4) access
FAQ
No. You add them as a user by their own Google email. They log in with their account, never yours.
Analyst or Editor is usually enough to build reports and explorations. Administrator is only needed to manage other users.
Yes, instantly from Property access management. HandItSafe surfaces this in the client's panel too.
Property. Account-level access exposes every property under the account. Grant at the specific property the agency needs.
Analyst is usually enough — it lets them build explorations and audiences without changing your setup.
HandItSafe requests exactly this access in one link. No passwords. Your client keeps a panel to remove it anytime.