Integrations · Google
Get access to a client's Google Ads account
Your client opens your onboarding link, signs in with Google and picks the ad account. Agency Pilot sends a user invitation from that account to your agency's Google login at the access level you chose — Standard, Read only or Admin — and the same connection starts pulling campaign data into your reports.
Google Ads at a glance
- How access is granted
- Automatically. A user-access invitation is sent from the client's account to your Google login the moment they connect.
- Access levels you can request
- Standard (default), Read only or Admin. Billing and Email-only access are never requested.
- What your client needs
- Admin access to the Google Ads account, and a Google login that can see it.
- Time for your client
- About a minute: sign in, approve Google's consent screen, pick the account.
- Feeds into Agency Pilot
- Spend, clicks, impressions, conversions, cost per lead, campaigns and search terms in Mission Control and the client dashboard. Sold jobs can be sent back as offline conversions.
- Works with manager accounts
- Yes. You can still link the account under your MCC later; the invitation gives you access in the meantime.

What your client does
On the onboarding link you send. No password is ever asked for or shared.
- 1
Opens the onboarding link and reads the box that says exactly what your agency will be able to do.
- 2
Clicks Connect next to Google Ads and signs in with the Google login they use for Ads. Google shows its own consent screen listing exactly what Agency Pilot is asking for. The client can read it before agreeing, and every Google product on the link is covered by that one screen.
- 3
If that login can see more than one ad account, picks the right one and clicks Share this one. Nothing is granted until they choose.
- 4
Sees Google Ads marked Connected. When every platform on the link is connected, the page confirms they're all set.
What happens on your side
- An invitation goes from the client's Google Ads account to the agency Google login you set up under Onboarding → Connected accounts, at the level you picked for this link.
- You accept it from the email Google sends (or from the Google Ads account picker). Until then the connection shows Invited.
- If you listed more than one Google login for your team, each one gets its own invitation on the same account. If one fails, the connection shows Partly added and names who is missing.
- Campaign data starts syncing into the client's record, backfilling up to 400 days on the first sync and refreshing hourly after that.
- You get a notification when the link is complete, and every step is written to the link's event log.
Google Ads access levels
Google Ads gives every user one access level per account. Here is what each one means and which ones a link can ask for.
| Role | What it allows | On an Agency Pilot link |
|---|---|---|
| Admin | Everything Standard can do, plus managing users, linking accounts and changing account settings. | Offered — use sparingly |
| Standard | Create and edit campaigns, ads, keywords and budgets; see billing. | Offered — the default |
| Read only | See campaigns, reports and settings. Cannot change anything. | Offered — good for audits and prospects |
| Billing | Billing settings and invoices only. | Never offered |
| Email only | Receives notification emails and reports. No sign-in access. | Never offered |
Doing it by hand in Google Ads
If a client would rather add you themselves, these are the steps in Google Ads. The link does exactly this for them.
- 1
Sign in to Google Ads and open the account.
- 2
Click Admin in the left menu, then Access and security.
- 3
On the Users tab, click the blue plus button.
- 4
Enter the agency's email address and choose an access level (Standard is usual).
- 5
Click Send invitation. The agency accepts from the email Google sends.
To link the account to a manager account instead, the agency sends a link request from its MCC (Accounts → plus → Link existing account) using the client's 10-digit customer ID, and the client approves it under Admin → Access and security → Managers.
On your side
- 1
Set your agency's Google login once, under Onboarding → Connected accounts. Every new link uses it unless you change it.
- 2
Create a link, tick Google Ads, choose Manage and the access level, and copy the link to your client.
- 3
Accept the invitation email when it arrives. Connected accounts shows the result under Our access: Invited, Added or Already had access.
- 4
Open the client's record to see Google Ads numbers in their dashboard and in Mission Control.
What the Google Ads connection feeds
- Ad spend, clicks, impressions, conversions and cost per lead in Mission Control, compared with the previous period or last year.
- The client's own dashboard and portal: the same numbers, without your agency's internal notes.
- The 50 top campaigns and 50 top search terms for the period, fetched live.
- Alerts when a client has enabled campaigns but no spend for three days, or spend with no ad leads.
- Sold jobs sent back to Google Ads as offline conversions with the click ID and hashed contact details, so Smart Bidding optimises for revenue, not form fills.
- A daily cross-check of Google's own click records against visits, for click-fraud protection.
Exactly what we ask Google Ads for
A link only requests the permissions the platforms on it need. Nothing here is used for anything other than the reason next to it. More on how we handle access.
| Permission | Why |
|---|---|
| adwords | Reads campaign performance for reports, and — only on a link that asks for access — sends one user-access invitation to your agency's Google login. |
| datamanager | Only when you switch on sold-job uploads for a client: sends those sales to their Google Ads account as offline conversions. |
| openid, email, profile | Shows you and the client which Google login a connection belongs to. |
Removing access later
- 1
Your agency's user access stays until the client removes it: Admin → Access and security → Users → the three-dot menu next to your email → Remove access.
- 2
The reporting connection is separate. Either side can end it: the agency with the trash icon under Onboarding → Connected accounts, or the client at myaccount.google.com → Security → Your connections to third-party apps → Agency Pilot → Delete all connections.
- 3
Ending the reporting connection stops syncing immediately. It does not remove the user access Google already granted to your team.
If something doesn't work
The client doesn't see their ad account after signing in
They signed in with a different Google login from the one that has access to Ads. Ask them to use Connect again and choose the login they use at ads.google.com.
The connection says the client isn't an admin
Only admins can invite users. Ask whoever owns the account (often the business owner or a previous agency) to open the link, or to upgrade the client's own access first.
The invitation email never arrived
Check the address set under Onboarding → Connected accounts and your spam folder. Pending invitations are also visible in the Google Ads account picker when you sign in with that login.
Our access says Already had access
Your login was already a user on that account, so no new invitation was needed. Nothing is wrong.
The account sits under another agency's manager account
That doesn't block a direct user invitation. If you also want it under your own MCC, the client can accept your link request — an account can be linked to more than one manager.
Google Ads: common questions
- Do I need a Google Ads manager (MCC) account?
- No. The link invites your agency's Google login directly to the client's account. If you run an MCC you can still link the account to it; the two are independent.
- Which access level should I ask for?
- Standard for accounts you will manage, Read only for audits and prospects. Ask for Admin only if you genuinely need to manage users or account links — clients are more comfortable approving the lowest level that does the job.
- Does Agency Pilot ever see my client's Google password?
- No. The client signs in on Google's own page. Agency Pilot receives a token scoped to the permissions shown on Google's consent screen, stored encrypted, and never a password.
- What happens to my access if I cancel Agency Pilot?
- Your agency's user access is granted inside Google Ads, so it stays until the client removes it. Only Agency Pilot's reporting connection ends.
- Can I get access for several people at my agency?
- Yes. List several Google logins under Onboarding → Connected accounts and each one gets its own invitation on the same account.
- Can the client connect Google Analytics and Business Profile at the same time?
- Yes. All the Google products on a link share one consent screen, so the client signs in once.
- Can I send sold jobs back to Google Ads?
- Yes. On the client's Attribution settings, start sending and every recorded sale after that goes to Google Ads as an offline conversion, retried automatically if Google is slow to accept it.
Keep going
Related integrations
Get Google Ads access without chasing logins
One onboarding link covers every platform your client uses. Start a free trial and send your first link today.
Plan Google Ads agency access around the delivery work
An access request is easiest to approve when the client understands the work it enables. For Google Ads, start with the individual Google Ads customer account, identified by its customer ID. Write down the first task your team will perform and the person responsible for it. A reporting review, a configuration change and ongoing management can require different permissions. Put that purpose in the onboarding brief before sending the link, so the client has a concrete reason to approve the request and knows who to contact if something is unclear.
The intended recipient is the Google login of each agency team member who needs direct account access. Check that identity with the person who will actually do the work. An account name alone can be ambiguous when an agency has several teams or the client has several businesses. Record the intended asset and recipient together. This small preparation step makes a later missing-access question much easier to resolve because both parties can compare what was requested with what was granted. It also helps the next account manager understand why the connection exists.
A practical Google Ads handover example
Illustrative example: A PPC agency taking over a regional service company could first use Read only to review search terms and conversion definitions. After agreeing the management scope, Standard may be appropriate. Record the agreed budget and launch approval outside the access request so that an accepted invitation cannot be mistaken for permission to increase spend.
For that takeover, the acceptance evidence is the correct customer ID under the agency login, an accepted invitation and visibility of the campaigns named in the brief. If the team also uses an MCC, verify its separate account link. Assign the initial campaign review to the media buyer and the conversion-definition review to whoever owns measurement. Leave budget changes outside the onboarding checklist until the client approves them. This gives the delivery team specific evidence of readiness without confusing a reporting connection with permission to change spend.
Separate account access from a successful implementation
The onboarding invitation does not transfer ownership, automatically link an MCC, change budgets or create a campaign. Sold-job conversion uploads require their own attribution setup.
After access is available, agree a small, observable first task in Google Ads. For a review engagement, that might be opening the expected account information and documenting what will be assessed. For implementation work, it might be locating the intended setting without changing it yet. Do not test a permission by making an unnecessary live change. If a real change is required, use the client’s agreed approval process and record what you changed, why it was needed and how the result will be checked.
Keep the Google Ads connection useful after onboarding
Compare campaign names, the selected date range, currency and conversion definitions before explaining a change in cost per lead. A platform conversion and a recorded sold job describe different stages of the customer journey.
Revisit the access arrangement when the scope changes, the client adds another business asset or the delivery team changes. Ask whether the existing permission still matches the work and whether someone who no longer serves the client still has access. Keep the review proportionate: a small one-off project may need only a clear closing check, while ongoing management benefits from a repeatable review point. The useful outcome is a current record of who can do what on the intended Google Ads asset, with the business owner able to understand that record.
Frequently asked questions
What should I confirm before requesting Google Ads access?
Confirm the individual Google Ads customer account, identified by its customer ID. Ask the client to identify the account they actually use for the work in scope, rather than choosing from a familiar-looking name. Also agree whether the immediate objective is assessment, configuration or ongoing delivery. These details determine which permission is reasonable and what your team will check afterward. If the client is unsure which asset belongs to the project, resolve that ownership or account-selection question before they approve access to an unrelated account.
Who should complete the client side of the request?
The request needs a client administrator who can see the intended Google Ads customer account. Send the instructions to that person or ask the client to involve them. A staff member who can read a dashboard may still lack permission to invite an agency. Repeating the same request with the same insufficient role will not fix that distinction. The authorized person should review the requested asset, recipient and permission before proceeding, and retain their own independent access after the agency is added.
Which Google Ads permission is appropriate for the work?
Read only fits a review of campaign performance; Standard allows campaign work; Admin should be reserved for work that requires managing users or account links. Start by naming the actions the agency must carry out, then match the role to those actions. If the team only needs to inspect Google Ads, explain why a viewing role may be sufficient. If a later task requires more authority, make that a deliberate scope decision with the client. Avoid requesting the broadest available role simply to prevent a possible future question; the current engagement should explain the permission being requested.
Is this an automatic grant or a guided client step?
Agency Pilot sends a user invitation automatically after the client selects the account. The agency still accepts that invitation in Google Ads. Linking an MCC is a separate arrangement. Read the status in the context of that workflow. An invitation, a client confirmation and usable Google Ads access are related milestones, but they do not always happen at the same moment. Assign responsibility for the next step before marking delivery as ready. This prevents an agency teammate from arriving at a scheduled task and discovering that a required acceptance or platform action is still outstanding.
Which agency identity should receive access?
Use the Google login of each agency team member who needs direct account access. Verify it before creating or sending the onboarding request, especially when the agency works through more than one account. Ask the actual recipient to confirm the identity they will sign in with. A forwarded email or a similar display name is not reliable proof that the correct account has been added. For a staffing change, arrange the replacement person’s appropriate access and remove obsolete assignments through the relevant platform process.
How do we verify that onboarding is complete?
After the platform action, sign in with the invited agency login, select the expected customer ID and confirm the campaign list belongs to the client before making any edits. Record who performed that check and whether any required work remains blocked. Prefer a harmless viewing check over an unnecessary live edit. If a teammate cannot reach the asset, compare the actual recipient and role with the original request before asking the client to start again. Completion should mean the right person can reach the intended asset with the agreed capability, rather than only that a message or notification was received.
Does connecting Google Ads also connect reporting?
Google Ads spend, clicks, impressions and conversions feed the client dashboard and Mission Control. A campaign reporting connection does not prove that every team member accepted their user invitation. Keep the client’s reporting expectation explicit in the service brief. If a metric is needed for a report, identify its source, date range and definition before promising that it will appear. A successful access step establishes only the capabilities described for this particular integration. It should not be used as evidence that another platform, a separate dataset or an unrelated source of business results has also been connected.
What should we check if the requested account is unavailable?
If the account is missing, check the client login and its account access first. If an invitation is missing, check the recipient address and pending invitations before resending. Start with account identity and authority because those determine what the client can share. Write down the exact stage where the flow stopped rather than repeatedly recreating the same request. If Google Ads shows an account-specific restriction, the appropriate platform administrator may need to resolve it first. Avoid broadening permissions or switching to another asset just to make a completion indicator appear; verify the intended account instead.
Does this invitation link the account to our MCC?
No. This flow invites the agency Google login as a direct user. An MCC relationship is a separate link request and approval in Google Ads. If the agency operates through an MCC, document both arrangements and verify the manager relationship separately. At offboarding, review both direct user access and manager access so that removing one does not leave the other overlooked.
Why can a campaign report work while a teammate still lacks access?
The reporting authorization and the agency user invitation serve different purposes. Agency Pilot may receive campaign data while the individual invitation is still awaiting acceptance. Check the recipient and invitation state for the teammate who cannot enter Google Ads. Reconnecting reporting is unlikely to solve an unaccepted user invitation and could create extra work for the client.
Does Standard access allow the agency to change campaign budgets?
The role supports campaign and budget work, but the client’s spending approval remains a separate business decision. Before taking over campaigns, record the agreed budget, approval contact and conditions for changing it. This is especially useful when the client has several accounts or agencies. A permission grant establishes what the platform allows, not the amount the client has authorized the agency to spend.
How should sold-job uploads be discussed during onboarding?
Treat them as an attribution setup decision after account identity and reporting are verified. A recorded sale and an advertising-platform conversion need a defined relationship; they are not interchangeable just because both appear in reporting. The product supports sending sold jobs through its attribution settings. Agree which sales will be recorded and check the setup before expecting those events to inform advertising decisions.
What should a takeover review establish before campaign edits?
Confirm the customer ID, active campaign names, current budgets and the meaning of the conversions the client uses to judge success. Note which campaigns are intentionally paused and any launch commitments already made. Preserve enough context to explain subsequent changes. This gives the agency a defensible starting point without interpreting a newly accepted invitation as a request to immediately rebuild the account.
How do we end access when the engagement finishes?
Remove direct users in Google Ads Access and security, address any separate manager-account link, and end the Agency Pilot reporting connection as separate handover actions. Agree a handover point before removing access that is still needed to finish approved work. Confirm the business retains the people and permissions it needs after the agency leaves. Keep permission removal separate from decisions about delivered work or historical reporting data; those are different questions. Record which Google Ads assignments were removed and which, if any, remain for an explicitly agreed support period, with a clear owner for the final review.
What is a sensible next step after verifying Google Ads access?
Open the agreed campaign set and document the existing budgets, conversion actions and search-term context before proposing changes. If measurement work is required, coordinate GA4 or Tag Manager access with the person responsible for that implementation. Confirm separately whether sold-job uploads are part of the engagement. The first useful outcome is a review tied to the correct customer account, with a clear explanation of which configuration or campaign decision needs client approval next.
