Keep the business as the primary owner, use individual company-controlled accounts, grant the least access required, and review users on a schedule. Agencies and employees should never become the only owners. Document recovery contacts and remove access immediately during offboarding.
What to do next
Map ownership
Create a register of profile groups, primary owners, managers, agency users, recovery contacts, and business units responsible for each location.
Use role-based access
Grant access to named users rather than shared credentials. Separate people who publish changes from those who only need reporting or review access.
Review and offboard
Run quarterly access reviews and connect employee, vendor, and agency offboarding to a same-day profile-access checklist.
Useful tools to explore
These products are relevant to the workflow. Verify current capabilities, pricing, coverage, and contract terms with each vendor.
Before you decide
- Business retains primary ownership
- No shared personal passwords
- Recovery contacts are current
Software authorization can support publishing, but it does not replace direct business ownership of the underlying profile.
Notes from the operating side
The safest access model separates profile ownership, delegated user access, and software authorization.
Governance note
Did this answer make the next step clearer?
31 people found this helpful.