Google Business Profile manager roles and access
Who should be a Google Business Profile manager and who an owner? Roles, limits, the 7-day rule and a safe access model for teams.
By Roozbeh Nazari · CEO
Most access problems on a local listing are not hacks. They are leftovers: a former employee who is still an owner, an agency that set the profile up under its own account, a founder's personal Gmail holding the primary role. Deciding who is a Google Business Profile manager, who is an owner and who has no access at all is a small governance task that protects the listing your customers see on Search and Maps. This guide explains the three roles as Google documents them, how to add, change and remove people, and the access model we recommend for single-location businesses, clinics and multi-location brands.
The three roles on a Google Business Profile
Google's help documentation describes three roles. Every profile has exactly one primary owner. A profile can have several owners and several managers. The differences are narrow, but they matter when something goes wrong.
- Primary owner: there is one per profile. The primary owner has every owner capability and cannot be removed until primary ownership has been transferred to someone else.
- Owner: has full control, including adding and removing people, changing other people's roles and deleting the profile.
- Manager: has almost the same access as an owner, with two exceptions. A manager cannot add or remove people and cannot delete the profile.
In day-to-day work the roles look identical. According to Google, owners and managers can both edit business information such as hours, address, phone number and URLs, accept Google updates, publish posts, manage photos and products, reply to reviews and questions, use messaging, download performance data and manage Google Ads account links. That is why the manager role is enough for almost everyone who works on the listing.
What a Google Business Profile manager can and cannot do
The practical reading is simple. A manager can do the work; only an owner can change who does the work. If a person only needs to update holiday hours, upload photos, answer reviews or pull monthly numbers, the manager role covers all of it. The two things a manager cannot do, managing people and deleting the profile, are exactly the two actions that are hardest to undo.
This is the principle of least privilege applied to a local listing: give each person the lowest role that lets them complete their tasks. It limits the damage of a compromised account, a rushed offboarding or a dispute with a supplier, without slowing anyone down.
How to add, change and remove people
Access is managed from the profile's settings, under "People and access". An owner selects Add, enters the person's email address, chooses Owner or Manager and sends the invitation. Google states that invited users get access as soon as they accept. To change a role, an owner opens the person's entry, edits the access level and saves. To remove someone, an owner selects the person and chooses "Remove person". Anyone who is not the primary owner can also leave on their own by choosing to stop managing the profile.
Two details from Google's documentation are worth knowing before you plan a handover:
- New owners and managers are restricted for 7 days. During that period they cannot delete or undelete a profile, remove other owners or managers, or transfer primary ownership. Attempting it returns an error.
- Removing a person does not remove their work. Review replies, posts and comments made by that person stay on the profile.
The 7-day rule has a planning consequence. If an employee who holds the primary owner role is leaving at the end of the week, adding a replacement on their last day is too late for a clean transfer. Add the new owner early, wait out the restriction, transfer primary ownership, and only then remove the old account.
A simple access model for teams and agencies
The following structure works for most organisations, and it is what we set up at the start of a local SEO engagement:
- Primary owner: a company-controlled Google account, not a personal Gmail address and not an agency login. Protect it with two-step verification and keep the recovery details where the business can reach them.
- Owners: one or two senior people inside the business, so that there is always someone who can manage access when the primary owner is unavailable.
- Managers: everyone else, including marketing staff, front-desk teams who update hours and any agency or freelancer.
Agencies should be managers, not owners. Google's guidance on working with third parties says that only profile owners can control who has access, and that is the position a business should keep. An agency that insists on owning the listing, or that creates the profile under its own account, makes it hard for you to change supplier later.
For brands with many locations, apply the same model at group level. Owners and managers can create location groups, so access can be organised by region or brand instead of profile by profile, and reviewed in one place when a contract ends.
Recovering a profile you do not control
If the listing exists but nobody in the business has access, Google provides an ownership request process. You start at business.google.com/add, find the business, choose "Request access" and complete the form. The current owner receives an email and, according to Google, has 3 days to respond. If the request is approved, you gain access. If it is denied, you can still suggest edits or appeal. If there is no response after 3 days, you may be given the option to claim the profile yourself. Google notes that service-area businesses, which have no storefront address, need to contact support instead of using the standard form.
Before filing a request, check the obvious places: old company mailboxes, the account of whoever built the website, and previous marketing suppliers. A direct message to the current owner asking them to add you as an owner is usually faster than the formal route.
Access rules for clinics and other sensitive sectors
Clinics deserve extra care because a profile carries patient-facing communication. Review replies and messages are written on behalf of the practice, so the people who hold manager access should be the people trained in how the clinic talks about patient information. Keep the list short, use named individual accounts instead of a shared password so that every action can be traced to a person, and remove access on the day someone leaves.
Working with a third party safely
Google's own tips for businesses that hire outside help are a useful checklist. It recommends learning the basics of the product yourself, asking about experience with similar businesses, working with one provider at a time and reviewing performance every month. It also lists warning signs: a provider that will not share performance data, that claims to represent Google, that threatens removal of your profile, that charges more than agreed, or that promises a fixed position on Search or Maps. No agency can promise a ranking, and a provider that does so is describing something outside its control.
A quarterly access review checklist
- Open "People and access" and confirm that every listed person still works with the business.
- Check that the primary owner is a company-controlled account with two-step verification.
- Downgrade any owner who only needs to edit content to manager.
- Remove former employees and former suppliers, keeping in mind the 7-day restriction on newly added people.
- Confirm that agencies hold manager access and that your contract says the profile belongs to the business.
- Record who has which role and the date of the review.
Access is not a ranking tactic, and it will not change how visible the profile is. What it does is make sure that the work you put into the listing cannot be lost because of a login nobody remembers. Ten minutes every quarter is enough to keep it that way.