How to Share Google Search Console Access
Google Search Console (GSC) is an indispensable tool for website owners and SEO professionals. It provides insights into search performance, indexing, and website issues. Sharing access is often necessary for SEO agencies, developers, and team members. However, incorrect access sharing can lead to unwanted changes and security risks.
This guide covers how to securely grant GSC access, understand permission levels, and avoid common pitfalls.
Understanding Google Search Console Permissions
Before granting access, it’s crucial to understand the different permission levels. The table below outlines each role’s capabilities and real-world use cases:
Permission Level | Actions Allowed | Data Visibility | Common Actions | Use Case |
---|---|---|---|---|
Owner | Full control, add/remove users, configure settings, verify ownership | Can see everything, including security issues, ownership verification, and full performance data | Add/remove users, submit sitemaps, manage settings | Best for website owners or primary administrators |
Full User | View all data, submit sitemaps, request URL indexing, disavow links | Can see performance reports, index coverage reports, URL inspection data | Submit disavow files, request indexing, analyze performance | Ideal for SEO professionals or site managers |
Restricted User | View most data but cannot make changes | Limited to performance data and coverage reports | Read-only access, can’t make changes | Best for external analysts or stakeholders needing reports |
Key Considerations:
- Owners have full control and can remove other users, so grant this role carefully.
- Full Users can impact SEO by disavowing links, requesting indexing, or submitting sitemaps.
- Restricted Users are read-only and are best for clients or stakeholders needing access to reports.
Step-by-Step Guide: Sharing Google Search Console Access
1. Log in to Google Search Console
Go to Google Search Console and sign in with your Google account.
2. Select the Property
From the dashboard, choose the website property you want to manage. Only verified owners can add users.
3. Access Settings
In the left-hand menu, click on “Settings.”
4. Navigate to ‘Users and Permissions’
Under the Settings section, click on “Users and permissions.”

5. Add a New User
Click the “Add User” button. A new window will pop up where you can enter details.
6. Enter User Details
- Input the email address of the person you’re granting access to.
- Ensure this email is associated with a Google account.
- If granting API access, use the service account email.
7. Assign Permission Level
Choose the appropriate permission level (Owner, Full, or Restricted) based on the user’s role.
8. Confirm & Verify Access
- Click “Add” to finalize the process. The user will receive an email invitation.
- It may take a few minutes for the invitation to arrive.
- The email subject will be “You’ve been added as a user to a Google Search Console property.”
- The user must accept the invitation before they can access the property.
- Check the ‘Users and Permissions’ section later to confirm they have accepted access.
Auditing Access to Google Search Console
Regularly review who has access by navigating to Settings > Users and Permissions. Remove unnecessary users to maintain security.
Best practices for audits:
- Document the date of the audit and users who were reviewed.
- Increase audit frequency if staff changes or agencies switch.
Troubleshooting Common Issues
- User doesn’t receive the invitation email: Check spam folders or resend the invite.
- User cannot accept the invitation: Ensure they are using a Google account.
- ‘Add user’ button is greyed out: Only verified owners can add users. Verify ownership first.
- User sees a ‘Property not found’ error: Ensure they are using the correct Google account.
- User sees a ‘You do not have permission to view this data’ error: Verify their permission level.
- 403 Error when using the API: Ensure the service account has been granted Full User access in GSC.
Best Practices and Security Considerations
Security Best Practices:
- Grant minimal necessary access – Assign the lowest permission level needed.
- Quarterly access audits – Document who has access and why, and schedule the next review.
- Use a company email for shared access – Helps maintain control if employees leave.
- Use Google Groups for access management – Grant access to a group instead of individual users.
- Enable two-factor authentication (2FA) on all Google accounts with GSC access to prevent unauthorized logins.
- Never share your Google account password – Use GSC’s built-in user management instead.
How to Verify Domain Ownership Before Sharing Access
Only verified owners can add users. If you haven’t verified ownership yet, use one of these methods:
- HTML File Upload (Recommended)
- Download the provided verification file.
- Upload it to your website’s root directory.
- Click “Verify.”
- DNS Record Verification (Best for long-term control)
- Add the provided TXT record to your domain’s DNS settings.
- Click “Verify” after the DNS updates.
- Google Analytics or Google Tag Manager Verification
- Must use the same Google account that manages your GA or GTM account.
Verifying Ownership for Multiple Subdomains
Each subdomain must be verified separately unless using DNS verification, which covers all subdomains.
How to Grant Google Search Console API Access
If you’re using GSC API for data extraction or automation, follow these steps:
- Go to Google Cloud Console.
- Create a new service account and generate a key.
- Add the service account email in “Users and Permissions” in GSC as a Full User.
- Use OAuth or API key authentication to connect your application to the GSC API.
Example: Using the API with Python
from googleapiclient.discovery import build
from oauth2client.service_account import ServiceAccountCredentials
SCOPES = ['https://www.googleapis.com/auth/webmasters.readonly']
KEY_FILE_LOCATION = 'service-account.json'
credentials = ServiceAccountCredentials.from_json_keyfile_name(KEY_FILE_LOCATION, SCOPES)
service = build('webmasters', 'v3', credentials=credentials)
Testing API Access
Run a simple query to verify API connectivity:
site_list = service.sites().list().execute()
print(site_list)
FAQ
How many users can I add to Google Search Console?
There is no official limit, but it’s best to keep access restricted to essential users.
Can I transfer ownership to a user with a different domain?
Yes, but they must verify domain ownership before becoming an owner.
What happens if I remove a user’s access?
They will immediately lose access to all GSC data and settings for the property.
Can a restricted user download data from Google Search Console?
No, restricted users can only view reports within the interface but cannot export data.
What should I do if I accidentally grant owner access to the wrong person?
Immediately remove their access under “Users and Permissions” to prevent any unwanted changes.