πŸ“– Platform Tutorials

GA4 Access for Agencies: Step-by-Step Property Authorization

Google Analytics 4 has a completely different access model than Universal Analytics. Learn how to get the right GA4 property access without accidentally requesting the wrong account or getting stuck with insufficient permissions.

Jon HighΒ· FounderJanuary 17, 20249 min read
#GA4#Google Analytics#analytics#property access

Why GA4 Access Is Different Than You Expect

If you were granting access to Universal Analytics (UA) for years, GA4's access model will feel foreign. The property hierarchy changed, permission levels evolved, and clients often have multiple GA4 properties without realizing it.

Common mistakes agencies make:

  • Requesting access to the wrong property (there are often duplicates from migrations)
  • Getting insufficient permissions (can see data but can't configure events)
  • Confusing Account vs. Property level access
  • Not requesting access to data streams or BigQuery exports
  • This guide ensures you get the right GA4 access on the first try.

    Understanding GA4's Account Structure

    GA4 uses a two-level hierarchy:

    Google Analytics Account

    β”œβ”€β”€ GA4 Property 1 (e.g., ga.measurement_id)

    β”œβ”€β”€ GA4 Property 2 (migration duplicate)

    └── GA4 Property 3 (testing/staging)

  • **Account**: The top-level container (holds multiple properties)
  • **Property**: Where actual data lives (each has a Measurement ID like G-XXXXXXXXXX)
  • Critical: Most clients have multiple GA4 propertiesβ€”some from UA migrations, some from testing, some unused. Requesting access to the wrong one means you're analyzing the wrong data.

    GA4 Permission Levels Explained

    GA4 has more granular permissions than Google Ads:

    Permission LevelCan EditCan ViewCan Manage UsersCan ConfigureUse Case
    -------------------------------------------------------------------------------

    | Administrator | βœ… | βœ… | βœ… | βœ… | Full access (recommended) |

    | Editor | βœ… | βœ… | ❌ | βœ… | Can configure, can't manage users |

    | Analyst | ❌ | βœ… | ❌ | ❌ | View and create reports |

    | Viewer | ❌ | βœ… | ❌ | ❌ | Read-only access |

    | No Permission | ❌ | ❌ | ❌ | ❌ | Denies access |

    The Manual Way: Step-by-Step Client Instructions

    Step 1: Identify the Correct GA4 Property

    Have your client verify which property to grant access to:

  • Go to [Google Analytics](https://analytics.google.com)
  • Click **Admin** (bottom left)
  • In the **Account** column, select their account
  • In the **Property** column, look for the property connected to their website
  • Click **Property Settings** β†’ **Data Streams** to verify the website URL matches
  • Pro Tip: Ask the client to screenshot the Property Settings page showing:

  • Property name
  • Measurement ID (G-XXXXXXXXXX)
  • Website URL
  • Data stream name
  • This confirms you're getting access to the right property.

    Step 2: Grant Account-Level Access (Recommended)

    Account-level access means you can see all properties under that account:

  • In Google Analytics, click **Admin** (bottom left)
  • In the **Account** column (leftmost), click **Account Access Management**
  • Click the **+** blue button (top right)
  • Select **Add users**
  • Enter your agency email address
  • Select **Administrator** or **Editor** permission
  • Check **Notify new users by email** (optional)
  • Click **Add**
  • Step 3: Grant Property-Level Access (Alternative)

    If the client only wants you to see one property:

  • In Google Analytics, click **Admin** (bottom left)
  • In the **Property** column (middle), click **Property Access Management**
  • Click the **+** blue button
  • Select **Add users**
  • Enter your agency email address
  • Select **Editor** or **Analyst** permission
  • Click **Add**
  • Common GA4 Access Issues (And Fixes)

    Issue 1: Client Grants Access But You Don't See the Property

    The Problem: The client granted access, but when you log in, you don't see their account or property.

    Solution:

  • Verify they used the correct email address (typos are common)
  • Check if they granted **Account** vs **Property** level access (you might be looking in the wrong place)
  • Wait 5-10 minutes for permissions to propagate
  • Try logging out and back into Google Analytics
  • Issue 2: You Can See Data But Can't Configure Events

    The Problem: You have access, but key features are disabled (conversions, events, data streams).

    Solution: You have Analyst or Viewer permissions. Ask the client to update to Editor:

  • Admin β†’ Property Access Management β†’ Your email β†’ Click pencil icon β†’ Change to Editor
  • Issue 3: Multiple GA4 Properties, Which One Is Correct?

    The Problem: The client has 5+ GA4 properties, and they're not sure which one is live on their website.

    Solution:

  • Have the client go to their website
  • Right-click β†’ **View Page Source**
  • Search for G-XXXXXXXXXX (Ctrl+F / Cmd+F)
  • The Measurement ID in the code matches the correct property
  • Alternatively, use the **Google Tag Assistant** Chrome extension
  • Issue 4: "You Don't Have Permission to View This Data Stream"

    The Problem: You can see reports but can't access data streams or configuration.

    Solution: Data streams require Editor or Administrator permissions. Viewer and Analyst can't see data stream details.

    The Google Ecosystem: One OAuth, Multiple Products

    When clients authorize Google through Agency Access Platform, they can simultaneously grant access to:

  • **Google Ads** (for campaign data)
  • **Google Analytics 4** (for website analytics)
  • **Google Tag Manager** (for tag management)
  • **Google Search Console** (for SEO data)
  • **Google Merchant Center** (for e-commerce)
  • This hierarchical access is unique to Googleβ€”Meta, LinkedIn, and TikTok all require separate authorization flows.

    Security Best Practices for GA4 Access

    For Agencies:

    βœ… Do:

  • Request **Editor** or **Administrator** for full configuration access
  • Use a dedicated agency email (e.g., analytics@youragency.com)
  • Document which properties you have access to (client spreadsheet)
  • Quarterly audit active client access
  • ❌ Don't:

  • Never ask for client Google account credentials
  • Don't request unnecessary Admin access (Editor is usually sufficient)
  • Avoid keeping access for past clients
  • Don't share your agency login credentials
  • For Clients:

    βœ… Do:

  • Grant **Editor** access (can configure but can't remove you)
  • Verify the correct property before granting access
  • Set up usage reports to monitor agency activity
  • Review access quarterly
  • ❌ Don't:

  • Never share Google login passwords
  • Don't grant access to all properties if you only need one
  • Avoid granting Admin unless necessary
  • Pro Tips for GA4 Client Onboarding

    1. Create a GA4 Access Checklist

    When onboarding new clients, verify:

  • [ ] Correct GA4 property identified (Measurement ID matches website)
  • [ ] Account or Property access granted (specify which)
  • [ ] Permission level confirmed (Editor or Administrator)
  • [ ] Data streams accessible (for tag configuration)
  • [ ] BigQuery access (if applicable for raw data export)
  • 2. Standard Email Template

    Subject: GA4 Access Request - [Client Name]

    >

    Hi [Client Name],

    >

    To analyze your website performance, I need access to your Google Analytics 4 property.

    >

    > Before granting access, please verify:

    1. Go to analytics.google.com β†’ Admin β†’ Property Settings β†’ Data Streams
    2. Confirm the Website URL matches: [client website]
    3. Note the Measurement ID (starts with G-)

    >

    > To grant access:

    > 1. In Google Analytics, click Admin (bottom left)

    > 2. In the Account column, click Account Access Management

    > 3. Click the + button β†’ Add users

    > 4. Enter my email: your-email@agency.com

    > 5. Select Editor permission

    > 6. Click Add

    >

    I'll receive a notification once complete. This typically takes 2-3 minutes.

    >

    Thanks!

    3. Document Everything in Your Client Spreadsheet

    ClientGA4 Property IDMeasurement IDAccess LevelDate AddedNotes
    ------------------------------------------------------------------------
    Acme Corp123456789G-ABC123DEFEditor2024-01-15Main website property

    4. Test Your Access Immediately

    Once granted access:

  • Log into Google Analytics
  • Select the client's property
  • Verify you can see:
  • - Realtime report (confirms live data connection)

    - Events β†’ All Events (confirms configuration access)

    - Admin β†’ Data Streams (confirms full configuration access)

  • Screenshot the property overview for your records
  • Scaling Your Agency: Beyond Manual GA4 Access

    As you grow from 10 to 100 clients:

  • **Centralized Dashboard**: Track all GA4 properties in one place
  • **Automated Onboarding**: Send guided OAuth flows that grant access in 5 minutes
  • **Template Workflows**: Standardized access requests for different client types
  • **Audit Logging**: Maintain records of who accessed what and when (SOC2 requirement)
  • Key Takeaways

  • GA4 has a two-level hierarchy: Account β†’ Property
  • Clients often have multiple propertiesβ€”verify the correct one before requesting access
  • **Editor** permission is sufficient for most agency needs (can configure but can't remove users)
  • Google's unique advantage: one OAuth can grant access to GA4, Google Ads, GTM, and more
  • Always test access immediately by viewing Realtime reports
  • Ready to transform your GA4 onboarding? [Start your free trial](/pricing) and get client access in 5 minutes, not 3 days.


    *Also read our guides for [Google Ads access](/blog/google-ads-access-agency) and [Google Tag Manager access](/blog/gtm-access-guide).*

    Ready to transform your client onboarding?

    Join 50+ agencies saving hundreds of hours every month with Agency Access Platform.

    Related Articles

    Ready to Transform Your Client Onboarding?

    Join 50+ agencies saving hundreds of hours every month. Replace 47-email onboarding with a single link.