Access checklist — before you install
This is the gate between "sent the email" and "start the install." An install started before access is confirmed is the most common cause of a support request that boils down to "why is this report empty."
Each check below takes about 30 seconds per source. Run it after your client confirms they've granted access, and before you spend any time building the report.
Monthly Comprehensive Client Report (GA4 + Search Console)
Required access
- GA4: Viewer role (or higher) on the client's GA4 property
- Search Console: Restricted User (or higher) on the client's property
30-second verify — GA4: Go to Admin > Access Management (under the "Property" column). Find your email in the list. The role column should show Viewer, Analyst, Editor, Marketer, or Administrator — any of these is enough. If your email isn't listed at all, you don't have access yet.
30-second verify — Search Console: Go to Settings > Users and permissions. Find your email in the list. The permission column should show Restricted, Full, or Owner. If it's not listed, access hasn't landed yet.
Both present → you're clear to install. Either missing → resend the matching email from the GA4 or Search Console guide before you start.
SEO Performance Report (Search Console + GA4)
Required access
- Search Console: Restricted User (or higher) on the client's property
- GA4: Viewer role (or higher) on the client's GA4 property
Same two checks as T1 — Search Console is the primary source for this template, so verify it first; GA4 supplies supplementary traffic context. Use the same 30-second verify steps above.
If you already confirmed both for T1 on the same client, you're covered for T2 too — no need to re-check.
PPC Report (Google Ads + GA4 for conversions)
Required access
- Google Ads: Read-only access (or higher — Standard/Admin also work) on the client's Ads account, granted either as a direct invite or accepted via a manager-account (MCC) link request
- GA4: Viewer role (or higher) on the property tracking the client's conversions
30-second verify — Google Ads (direct invite): Go to Admin > Access and security. Find your email in the Users list. The access level column should show Read-only (or Standard/Admin — both are more than enough).
30-second verify — Google Ads (MCC link): Go to Admin > Access and security > Managers tab. Your agency's manager account should show status Linked, not Pending. Pending means the client hasn't accepted yet.
30-second verify — GA4: Same as T1 above.
Missing either one? Resend the matching email from the Google Ads or GA4 guide before you start.
If a check fails
Don't start building the report. Resend the relevant template, and re-check once the client confirms they've added it. A report built against missing access doesn't fail loudly — it just shows blank charts, which costs you more time to diagnose later than the 30 seconds it takes to check now. If a report that was working suddenly goes blank weeks after install, see client report shows no data.
AgencyWorks is not affiliated with Google. Looker Studio is a trademark of Google LLC.
These guides ship inside every AgencyWorks template as the Client Onboarding Kit.
See the templates