You stay in control of your accounts
To fix your data I need access to the tools involved. You never share a password, I ask for the least access the work needs, and you can remove me at any time.
The ground rules
- Never send me your own password. Every tool below lets you add a person by email with a set role, so nobody shares a login.
- Use my email address, or create one for me. Many organizations prefer to give me an address on their own domain (for example, data-help@yourorg.org). That keeps access under your control: when we're done, you turn off that one account and its access to every tool goes with it.
- Least access. The roles below are what I need to audit and fix things. If I only need to look, I'll say so and you can choose a view-only role.
- Only the tools in your engagement. Skip any tool we aren't working on.
- Your donor data stays out of AI tools. I never put it into one.
- Removal at handoff. When the work is done, I send you the list of tools you gave me access to, and you remove me that day or after any follow-up period we've agreed.
You'll need admin rights yourself to add a user. If a step is greyed out, whoever set up the account (often a past staff member or agency) has to add me or give you admin first.
How to add me
Google Analytics 4
Role: Editor, on your property (view-only: Viewer)
- Sign in at analytics.google.com and pick your website's property.
- Click Admin (the gear icon, bottom left).
- Under Property settings, click Property access management.
- Click the blue +, then Add users.
- Enter my email address and choose Editor, then click Add.
Add me at the property level, not the account level, so I only see this website.
Google Ads, including Ad Grants
Access level: Standard (view-only: Read only)
- Sign in at ads.google.com and open your account (for Ad Grants, the grant account).
- Click Admin in the left menu, then Access and security.
- Click the blue +.
- Enter my email address and choose Standard.
- Click Send invitation.
Standard can build and edit campaigns but can't add or remove users. Linking Ads to Analytics needs Admin, so if your engagement includes that, we'll do that one step together on a short call.
Google Tag Manager
Permission: Publish on your website's container (or Approve)
- Sign in at tagmanager.google.com and open your account.
- Click Admin.
- In the Container column, click User Management.
- Click the blue +, then Add users.
- Enter my email address, choose Publish, then click Invite.
Choose Approve instead if you'd rather someone on your team publishes each change.
Google Search Console
Permission: Full user (view-only: Restricted)
- Sign in at search.google.com/search-console and pick your website.
- Click Settings at the bottom of the left menu.
- Click Users and permissions, then Add user.
- Enter my email address, choose Full, then click Add.
Please don't make me an Owner. Owners can manage other users, and I don't need that.
Salesforce
A user of my own, with the System Administrator profile
- Click the gear icon (top right), then Setup.
- In Quick Find, type Users and click Users.
- Click New User and enter my name and email address.
- For Username, use my email plus your organization's name (for example, name@philanthrodata.org.yourorg), since Salesforce usernames must be unique worldwide.
- Set User License to Salesforce and Profile to System Administrator, then click Save.
Every change I make is then logged under my name, not yours. This uses one Salesforce license, so tell me first if you're out of free ones.
How to remove me
| Tool | Where | What to click |
|---|---|---|
| Google Analytics 4 | Admin, then Property access management | Click my name, then Remove access |
| Google Ads | Admin, then Access and security | The three-dot menu by my name, then Remove access |
| Google Tag Manager | Admin, then Container User Management | Click my name, then Remove |
| Google Search Console | Settings, then Users and permissions | The three-dot menu by my name, then Remove access |
| Salesforce | Setup, then Users | Freeze my user, then edit it and untick Active (Salesforce doesn't delete users) |
Menu names in these tools change from time to time. If something doesn't match, tell me what you see and I'll help.
Questions about access or security?
Ask on the first call, which is free. You can also read the privacy policy.