Whose Login Is It? Owning Your Dealership’s Ad and Data Accounts

Ask your team one question this week: if we fired every marketing vendor tomorrow, which accounts would we still control? For a lot of dealer groups the honest answer is almost none. The agency created the Google Ads account under its own manager account. The website vendor set up GA4 — Google Analytics 4, the platform that records what shoppers do on your site — under the vendor’s login. A service manager who left two years ago is still the only owner on three of your Google Business Profiles.

That arrangement works fine right up until you change vendors. Then the conversion history leaves, the remarketing audiences leave, the tracking configuration leaves, and the new vendor starts from zero. You paid for every click and every data point in those accounts. Whether you own any of it depends on who holds the top role on each login.

This is a fixable problem, and fixing it costs almost nothing. Here’s the map.

Which accounts does the group actually need to own?

Think of this as the title work on your marketing operation. Eight categories, and the group — not a store, not a vendor, not a person — should hold the top role on each:

1. Google Ads. The account where your search and display budget runs. The spend history, conversion data, and audience lists live here. In Google Ads, admin access is the level that can grant account access and change other users’ access levels (Google Ads Help). If your agency holds admin and you hold “read only,” you’re a guest in the account your money built.

2. GA4. Administrators in GA4 have full control of the property, including managing users (Analytics Help). If the website vendor is the administrator, the vendor decides who sees your traffic data — including you. (One GA4 property for the whole group covers the measurement side.)

3. Google Tag Manager (GTM). The container that holds your tracking tags — the snippets that record form fills, calls, and trade-in tool submissions. A container with one administrator is one resignation away from a dead tracking setup.

4. Every Google Business Profile. One per rooftop, plus fixed ops profiles if your service departments have their own. A Business Profile owner has full control and can add or remove users; managers cannot (Business Profile Help). The owner role on each profile should sit with the group. A former BDC (business development center) manager holding sole ownership of a store’s profile is an ugly discovery, and an easy one to make.

5. Meta business assets. The Business Manager (or Business Portfolio), ad accounts, pages, and pixel for Facebook and Instagram. Same logic: the group owns the business asset, vendors get partner access.

6. Call-tracking numbers. The provisioned numbers your ads and listings display. If the vendor owns the account, the vendor owns the numbers — and the numbers your customers have saved stop ringing your BDC when the contract ends.

7. The domain. The registrar login for every store’s website domain. This one is existential. A vendor-registered domain is a hostage situation waiting for a dispute.

8. CRM and audience exports. Your customer relationship management system — VinSolutions, DealerSocket, whichever — plus the right to export your customer lists, sold-unit records, and the audiences built from them. The data about who bought what from which rooftop is the most valuable marketing asset the group holds.

Who should own the dealership Google Ads account — us or the agency?

The group. Always the group. This is the question that settles the rest, so it deserves a direct answer.

The agency gets access. Access and ownership are different things, and the difference is revocability. When the group holds the top role — Google Ads admin, GA4 administrator, Business Profile owner, Meta business admin — vendor access is something you grant on Monday and revoke on Friday. When the vendor holds the top role, your access is something they grant, and your leverage at renegotiation is whatever they feel like leaving you.

The working standard: the group holds the top role on every account, with at least two named admins — real people on your payroll, say the marketing director and the controller, not a shared inbox. Two, because Google’s own guidance flags the single-administrator account as the failure mode (Google Ads Help). People leave. Rooftops get sold. A lone admin who moves to the import store across town takes your account access with them.

Vendors then connect through their own manager or partner structures with the permissions the work requires — usually editor or standard access, almost never admin. A competent agency will not object to this. An agency that insists on owning the account is telling you something about how it plans to handle your exit.

One wrinkle worth naming for a dealer group: agencies often run client accounts under a manager account (what Google Ads calls an MCC). That’s fine. The manager account can link to your account. The account itself — the one with the history, the conversions, the audiences — sits under a group-owned login. Linked, not absorbed.

What should the contract actually say?

Ownership on paper beats ownership by handshake. Three things belong in every marketing vendor agreement, and have counsel review the language before it’s signed:

Account ownership. Name the accounts. State that the Google Ads account, GA4 property, GTM container, Business Profiles, Meta assets, call-tracking numbers, and any accounts created during the engagement are the property of the dealer group, created under group-owned logins or transferred to them within a defined window.

Export rights. The group can export its data — campaign history, conversion data, call recordings, audience lists, CRM records — at any time, in a usable format, without a fee invented at termination.

What happens at termination. A transition clause: admin access confirmed, credentials handed over, tracking documented, data exported, within a set number of days. The worst time to negotiate your exit is during your exit.

There’s a regulatory angle here too. The FTC’s Safeguards Rule FAQ for automobile dealers covers overseeing service providers that handle customer information (FTC guidance). Vendors with access to your CRM data and customer lists are service providers handling customer information — the same logic as what your team may put into an AI tool. What that requires of your specific contracts is a question for your counsel — have them review it. The point for this post is narrower: you cannot oversee a service provider’s handling of your data if you don’t control the accounts the data lives in.

Can we audit this in an afternoon?

Yes. This is not a six-week engagement. It’s a spreadsheet and a few hours, and a marketing director or a sharp controller can run it.

Column one: every account. List them all, across every rooftop. Google Ads, GA4, GTM, each Business Profile, Meta Business Manager, call tracking, domain registrar, CRM, plus anything the OEM — original equipment manufacturer, your franchise brand — requires you to run through its program. Expect to find accounts nobody remembers creating.

Column two: who holds the top role. Not who has access — who holds owner or admin. Log in and check the user list on each platform. You’re looking for four problems: a vendor as owner, a former employee as owner, a single lone admin, and accounts nobody can log into at all.

Column three: the fix. For each problem, one line. “Request admin transfer from agency.” “Claim Business Profile, remove departed employee.” “Add controller as second GTM admin.” “Move domain to group-owned registrar account.” Most fixes are a settings change. A few require an email to a vendor, and the vendor’s response time to that email is itself useful information.

Then put a recurring hour on the calendar — quarterly is enough — to re-run the check. Admin lists drift. People leave. New vendors create new accounts. The audit is only as good as its last pass.

Say you run this across eight rooftops and find the website vendor owns GA4, two Business Profiles trace to a BDC manager who left in 2023, and the whole group’s tracking sits in a GTM container with one admin who happens to be your agency contact. Nothing is on fire. But every one of those is a line item of gross you’d burn rebuilding history and tracking the next time a contract turns over — and vendor contracts always turn over. Vendor sprawl makes every one of those turnovers more frequent.

Where does a fractional CMO fit?

I’m a fractional CMO. I spent 3.5 years running marketing for La Mesa RV, an 11-store RV dealer group — not an auto dealer, and I don’t claim otherwise — where I moved $500K a month from broadcast that couldn’t be measured to digital that could. That move only works if you control the accounts the measurement lives in. You can’t prove what digital returns when the analytics belong to a vendor with an incentive to grade its own homework.

The structural problem for a group with 3 to 15 rooftops is that nobody inside the building owns this layer. The GM owns sold units and gross. The agency owns its scope. The website vendor owns its platform. The account architecture — who holds which login, what the contracts say, what survives a vendor change — falls between every chair. That’s the layer a fractional CMO owns: the audit, the transfer of every top role back to the group, the contract language your counsel reviews, and the quarterly check that keeps the drift from creeping back in. It’s not glamorous work. It’s the work that makes every dollar of marketing spend auditable, portable, and yours.