Meta Business Assets to Own Before Hiring an Agency
A practical ownership and access checklist for domains, ad accounts, pages, analytics, datasets, billing, CRM, creative, documentation, and agency permissions.
An agency should be able to do its work without becoming the only doorway into your marketing infrastructure.
That does not mean the agency should receive weak access or wait days for every approval. It means the business keeps durable control of the assets, while specialists receive the permissions required to operate them.
The test is simple:
If the working relationship ended tomorrow, could an authorized person at the business access the accounts, keep essential systems running, retrieve the data, pay the bills, and grant a replacement team access?
If the answer is no, fix the ownership structure before increasing spend.
TL;DR
Ownership does not mean doing everything yourself
For this guide, business-owned means:
1. The account or contract is attached to a business-controlled identity.
2. The business has an active administrator who can add or remove access.
3. Billing and renewal are visible to the business.
4. Data can be retrieved according to platform rules and applicable agreements.
5. No outside party is the sole recovery contact.
The agency can still build, manage, optimize, and report. Good ownership makes that work safer for both sides.
The asset ownership map
| Asset | Business should control | Agency usually needs | Evidence to record |
|---|---|---|---|
| Domain and DNS | Registrar, renewal, nameservers, recovery | Scoped DNS or deployment access when needed | Registrar, domain, expiry, DNS export |
| Business email | Workspace or mail tenant and recovery | Named work identity | Admins, groups, recovery process |
| Website and hosting | Hosting account, CMS, CDN, repository | Developer/editor access | Provider, project ID, deployment owner |
| Google Ads | Direct client-account admin | Manager-account link | Customer ID, admins, owner-manager status |
| Meta assets | Business portfolio, Page, Instagram, ad account, dataset | Partner or assigned asset permissions | Portfolio and asset IDs, access list |
| Analytics and tags | GA4, Tag Manager, Search Console | Role appropriate to work | Property, stream, container, admins |
| CRM and lead systems | Subscription, records, fields, exports | Workflow/reporting access | Owner, integrations, retention, export |
| Billing | Payment method and invoices | Visibility only when necessary | Payer, billing profile, renewal dates |
| Creative and copy | Source files and documented rights | Working files and publishing access | File location, licence, approvals |
| Documentation | Asset register and change log | Ability to update operating notes | Owner, review date, handover path |
1. Domain, DNS, and business email
The domain is upstream of the website, email, tracking verification, and sometimes account recovery.
Use a registrar account controlled by the business. Keep:
Do not transfer the domain to an agency simply because it is building a landing page. Give scoped access through the registrar, DNS provider, or deployment platform where available.
The same principle applies to email. Critical accounts should not depend on an address at the agency’s domain. Use a company-controlled identity or role address for billing, security notices, and ownership recovery.
2. Website, hosting, CDN, and source code
The business should know where production runs and who can deploy.
Record:
Do not put secrets in the asset register. Record where they are managed and who can rotate them.
Agency access can be broad enough to do the contracted work without making a contractor’s personal account the only owner of production.
3. Google Ads account
The business should have direct administrative access to the individual Google Ads client account. An agency can link it to its manager account.
Google explains that linking an existing client account to a manager does not remove the client account’s data ownership or administrative rights. A client account can unlink a manager, provided the access requirements are met. Google also warns that unlinking can affect shared remarketing lists, cross-account conversion tracking, and manager-based billing, so offboarding must be planned rather than treated as one button.
Before onboarding, record:
Official references: Google Ads manager-account ownership and what happens when accounts are unlinked.
4. Meta business, Page, Instagram, ad account, and dataset
Keep the business portfolio and connected assets under genuine business control. Record the IDs for:
Assign the agency through business or asset permissions instead of sharing a personal Facebook login. Meta states that sharing an account or using inauthentic shared profiles conflicts with its rules. Meta also distinguishes full Page control from task access; a person with full control can manage access and can remove others, so reserve that level for genuinely trusted administrators.
Use the least permission that still allows the agreed work. Campaign managers may need ad-account and dataset access without needing the ability to delete a Page or manage every business asset.
Official references: Meta ad-account access, Facebook Page access levels, and Meta account security.
5. Analytics, tags, and search data
The business should administer:
Google Analytics permissions can be granted at account or property level. Give the agency the level it needs; adding someone at account level can extend access across properties.
Before granting access:
1. Remove former staff and vendors who no longer need it.
2. Confirm two internal administrators.
3. Export or document the current tag configuration.
4. List key events and conversion definitions.
5. Note links to Google Ads, Search Console, and other products.
6. Record data retention and consent responsibilities.
Official reference: Google Analytics user and access management.
6. CRM, call tracking, forms, and automations
The ad platform sees only part of the customer journey. The business should control the systems that know whether a lead qualified, booked, purchased, cancelled, or paid.
Include:
Map the flow:
Ad → landing page or native lead path → CRM → contact → qualified → booked → won → value returned to advertising
If the agency sets up Conversions API or offline feedback, the business should know which system sends the event, what data is transmitted, and who monitors failures. Meta’s Business Tools Terms require appropriate rights and permissions for data shared through tools such as the Pixel and Conversions API.
Use the offline conversion tracking guide to document the technical chain.
7. Billing and commercial accounts
The business should be able to see who pays the platform and what happens if the relationship ends.
Record:
Do not place a personal card in a shared document. Use platform billing controls and approved company processes.
Clarify whether the agency pays media and re-invoices the business or the platform charges the business directly. Neither is automatically wrong; the cash-flow, suspension, refund, and exit consequences must be understood.
8. Creative, copy, audiences, and working files
The business needs the final deliverables and the rights promised in the agreement.
Record:
Do not assume paying for production automatically transfers every underlying licence. State what is assigned, licensed, reusable, editable, or time-limited.
9. Documentation and evidence
Create an asset register with these columns:
| Field | Example |
|---|---|
| Asset | Meta ad account |
| ID or URL | Account ID, not a password |
| Business owner | Operations director |
| Internal admin | Named employee |
| External access | Agency partner |
| Billing owner | Finance |
| Integrations | CRM, dataset, reporting |
| Last reviewed | 2026-08-02 |
| Exit action | Remove partner after export and validation |
Review it quarterly and whenever a vendor or employee changes.
A safe onboarding sequence
Step 1: Inventory
List every asset, owner, administrator, billing dependency, and integration.
Step 2: Repair ownership
Move critical recovery and administration to business-controlled identities. Do not make abrupt transfers while campaigns are live; document dependencies first.
Step 3: Secure accounts
Require unique credentials, two-factor authentication, login alerts where available, and a recovery process. Meta specifically recommends two-factor authentication and warns against suspicious partner requests.
Step 4: Grant scoped access
Use manager links, partner access, groups, or named roles rather than shared passwords.
Step 5: Validate
Ask the agency to confirm it can access the agreed assets. Ask an internal administrator to confirm the business can revoke that access.
Step 6: Capture the baseline
Export current performance, conversion settings, active campaigns, tracking diagnostics, and change history before major work begins.
Contract points to settle
Ask a qualified legal adviser to adapt the agreement for your jurisdiction. Operationally, clarify:
Pre-hire checklist
FAQ
Should the agency create the ad account?
It can assist with setup, but the business should retain direct administrative control and understand manager ownership, billing, and tracking dependencies.
Should an agency have administrator access?
Sometimes. The required level depends on the work. Grant the minimum level that can complete the contract, and review it regularly. Avoid giving full control merely for convenience.
What if the agency already owns everything?
Do not remove access impulsively. Inventory dependencies, agree on a transfer plan, export evidence, secure replacement billing and tracking, then validate continuity before unlinking.
Is business ownership a sign that I do not trust the agency?
No. It is normal operational resilience. Clear access also protects the agency from being treated as the permanent custodian of assets it does not own.
What should I review before choosing a provider?
Use the questions to ask before hiring a PPC manager and compare freelancer, agency, and in-house models.
Make access part of the marketing system
I work inside business-owned accounts and connect campaign decisions to tracking, landing pages, CRM outcomes, and commercial goals. See my PPC strategist service or conversion-tracking service. If you need the current asset and performance chain diagnosed before a handover, send the setup for a first assessment.
Related guide: Meta Ads agency handover checklist.
Written by
Vince Servidad
PPC Strategist · Google Ads, Meta Ads & conversion systems
Filipino PPC strategist. A seven-figure Shopify brand and 10+ years across Google Ads, Meta Ads, stores, tracking, and content.
Need help with PPC Strategy?
Get strategic and hands-on support from a PPC strategist based in the Philippines.