Your agency has asked for access to Google Analytics. You don't need to share your password for it. Google Analytics lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against Google Analytics's own help pages in October 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Editor is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Editor | Full control of the property's settings, such as data streams, events and links. Cannot manage users. | Usually the right one |
| Marketer | Creates and edits audiences, events and key events, and edits attribution settings. Sees reports like a Viewer otherwise. | If the work needs it |
| Viewer | Sees reports and settings and builds its own explorations, without changing the property. | If the work needs it |
| Administrator | Full control of Analytics, including users and their roles. | If the work needs it |
Add your agency to Google Analytics
- In Google Analytics, open your property and click Admin. Under Property, click Access Management.
- Click +, then Add users, and enter your agency's email address.
- Tick Notify new users by email. Without it Google sends no email, and the email is what marks this step done.
- Choose the Editor role, then click Add.
Only an Administrator can add users, and the address you add needs to be a Google Account, such as Gmail or Google Workspace.
How you both know it worked
With Notify new users by email ticked, Google Analytics emails your agency from google.com. Your agency then shows in Access Management, where you can see or change its role at any time.
Remove access when the project ends
- In Google Analytics, open your property, click Admin, then Access Management under Property.
- Tick the box next to your agency's email address, then click Remove.
Do you have to share your password?
No. Every step above uses Google Analytics's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one Get Set Keys link instead of a page like this. It walks the client through Google Analytics and the other platforms the project needs, and checks that each step is done.