Your Google Business Profile can keep showing in Search and Maps while the wrong person still controls its most important settings. If a former employee, old agency, or personal Gmail account is the only primary owner, a routine departure can become a customer-facing access crisis. Google says owners can add or remove users and manage profile information, while managers cannot add or remove users; one profile may have several owners but only one primary owner. [1]
Guidance checked: September 18, 2026 at 1:15 p.m. EDT / 17:15 UTC.
The problem: visibility is not ownership
Being able to edit hours or answer a review does not prove that your company controls the profile. A manager can handle much of the daily work, but only owners can change other users’ access, and only the primary owner can transfer primary ownership. [1] [3]
For a small business, the practical risk is continuity: a departed person may remain able to change public information, while the current team may be unable to remove that access or complete an orderly transfer. Google’s policy says authorized representatives should encourage the business owner to own the profile and add representatives as managers. [4]
Who should run this audit?
Affected
- A business whose profile was created by an employee, relative, web designer, marketing company, franchise contact, or previous owner.
- A business that cannot name the current primary owner from memory.
- A business preparing for an employee departure, agency change, sale, merger, or leadership transition.
- A multi-location business with inconsistent ownership across locations.
Not the same problem
- If the company controls the primary-owner account but cannot pass multifactor authentication, use our backup sign-in plan.
- If the website and email domain itself may expire or be hijacked, use our domain-name safety audit.
- If the listing is suspended, duplicated, or violates eligibility rules, ownership access alone may not resolve that separate issue.
This guide is specifically about who controls the Business Profile and how that control survives staff or vendor changes. It is not a ranking, advertising, review-removal, or general Google-account recovery guide.
Do not share one password to “solve” access
Do not pass around the primary owner’s Google password or one-time codes. Google directs each person to use their own Google Account for Business Profile access, and Google says it will never ask for a one-time password or PIN. [1] [5]
Also do not approve an unexpected owner or manager request just because the message mentions Google. Google warns profile owners to reject access requests from people they do not recognize and says it does not charge to maintain, verify, or reinstate a Business Profile. [5]
The ownership-continuity audit
Open People and access from the real profile
Sign in with the company-controlled Google Account that currently manages the listing. Open the Business Profile in Google Search or Maps, select More → Business Profile settings → People and access, and record every user, email address, role, and pending invitation. Google uses this area to add users, change roles, and remove users. [1]
Take a dated screenshot or export your audit notes to a company-controlled location. Do not put passwords, recovery codes, or one-time codes in the document. This is practical recordkeeping guidance, not a Google storage requirement. [5]
Identify the primary owner—not just an owner
A Business Profile can have multiple owners, but only one primary owner. Only the primary owner can transfer that primary role, while other owners can add or remove users and change access roles. [1] [3]
Good state: the primary owner is a durable, company-controlled account; at least one additional trusted owner exists; day-to-day vendors have only the access they need. Bad state: the primary owner is a former employee, an agency’s account, an unknown personal account, or an inbox no one can recover. This is a continuity recommendation derived from Google’s documented roles, not a Google guarantee. [1]
Verify the account behind the role
For each company-owned Google Account with owner access, run Google’s Security Checkup, confirm the recovery phone and email still belong to the business, and enable a strong second verification method. Google says Security Checkup provides personalized recommendations; it also recommends current recovery options and 2-Step Verification. [6]
Practical guidance: assign separate named Google Accounts to separate trusted owners—never shared credentials or shared MFA prompts—keep each company-controlled account’s recovery methods current, and test authorized sign-in before a real emergency. This reduces dependence on one employee’s phone without pretending that a shared password is continuity. [1] [6]
Give vendors manager access unless ownership is truly required
Managers can edit business information, respond to reviews, and manage posts, but they cannot add or remove users or remove the profile. Owners have broader control. Choose the least privilege that still lets the person do the job. [1]
Google’s policy says an outside SEO company, booking provider, friend, or other company managing a profile it does not own is an authorized representative. It says the representative should keep the owner informed, transfer ownership to the business owner upon request, and encourage the business owner to own the profile while adding representatives as managers. [4]
Add the successor before removing the predecessor
Invite the new company-controlled account first and confirm it accepts the invitation. New owners and managers must wait seven days before they can remove other users, delete or undelete a profile, or transfer primary ownership. [1]
That waiting period means a same-day offboarding plan may be too late. Schedule the transfer at least a week before a known departure, then verify the new owner can perform the required administrative action before removing the old account. [1]
Transfer primary ownership in the right order
Google’s current path is More → Business Profile settings → People and access, select the intended user, edit Access, choose Primary owner, and save. The target must already be an owner or manager, and only the current primary owner can complete the primary-owner transfer. [3]
After the transfer, sign out and test the new primary owner’s access. Reopen People and access, confirm the roles, and only then remove or downgrade the departing account. This verification order is practical guidance built around Google’s transfer and access-management workflow. [1] [3]
When the wrong person already owns it, use the official request path
For a storefront or hybrid business, Google directs an authorized business owner to find the existing listing at business.google.com/add, select the business, choose Request Access, complete the form, and submit it. Service-area businesses without a physical shop or office use Google’s contact flow for a listing-ownership transfer. [2]
The current profile owner then has three days to respond. If the request is denied, Google says you can suggest an edit and may appeal; if there is no response after three days, you may be offered a claim or verification option, but Google warns that option is not always available. [2]
Preserve the confirmation email and case details. Keep proof that you are authorized to act for the business ready, but submit it only through Google’s official workflow—not to a caller, text sender, or unofficial “recovery” service. Google documents the confirmation-email workflow and separately warns against impersonation and code requests. [2] [5]
Close the loop with a quarterly review
Once per quarter—and immediately before or after staffing, agency, or ownership changes—verify the primary owner, backup owner, manager list, pending invitations, recovery options, and public phone number, website, address, and hours. Google says the profile’s phone number and website should be the business’s single authoritative contact details and be verifiable by the business owner. [4]
Record who reviewed the profile, when it was checked, what changed, and the next review date. Keep this inventory separate from passwords and recovery codes. This is practical continuity guidance; Google’s cited pages establish the access and account-security controls, not a required audit format. [1] [6]
Good and bad ownership patterns
Good: business-owned continuity
- Primary owner is a durable company-controlled account.
- At least one additional trusted owner is tested.
- Each person uses an individual Google Account.
- Agency staff are managers unless owner rights are genuinely required.
- Recovery options and 2-Step Verification are current.
- Departures trigger a documented access review.
Bad: one person is the whole plan
- A former employee or agency is the only primary owner.
- The team shares one password and phone prompt.
- No one has checked pending invitations.
- A personal Gmail address has no business recovery path.
- The business plans to transfer access on the person’s final day despite the seven-day restriction.
- The first response to a lockout is creating a duplicate listing.
These good/bad patterns are practical recommendations derived from Google’s documented role separation, individual-account guidance, seven-day restriction, security controls, and ownership-request path; they are not guarantees of recovery or uninterrupted visibility. [1] [2] [6]
Two realistic examples
Agency offboarding done safely
A dental office discovers that its marketing agency is an owner and an employee’s personal account is the primary owner. The office adds a durable company-controlled account, waits through Google’s seven-day limitation, transfers primary ownership, confirms access, then downgrades or removes the agency according to the contract. The public profile and reviews stay with the existing listing. Google states that a proper primary-ownership transfer preserves business information such as reviews. [3]
The costly wrong turn
A shop loses access to its listing after a manager leaves, then creates a second profile instead of requesting ownership of the existing one. Now customers may encounter conflicting information while the original reviews and control problem remain. The safer first path is Google’s ownership-request workflow for the existing profile. [2]
FAQ
Can a Business Profile have two primary owners?
No. Google says a profile may have multiple owners but only one primary owner. Use an additional trusted owner for continuity, but identify exactly which account holds the primary role. [1]
Can a manager remove an old employee?
No. Managers cannot add or remove users. An owner must manage access, and only the primary owner can transfer the primary-owner role. [1] [3]
Why can’t a new owner remove someone immediately?
Google applies a seven-day limit to new owners and managers for actions that include removing users, deleting or undeleting a profile, and transferring primary ownership. Plan ownership changes before the final day of an employee or vendor relationship. [1]
What happens after an ownership request?
Google says the current owner has three days to respond. Approval gives access; denial may allow an appeal; no response may expose a claim or verification option, although Google says that option is not always available. [2]
Should our agency be the owner?
Google’s policy says the business owner should own the profile and authorized representatives should generally be added as managers. An owner role may be justified for a specific operational need, but it should be documented, reviewed, and removable without losing company control. [4]
Will Google call and ask for a verification code?
Google says it will never ask for a one-time password or PIN and does not charge to maintain, verify, or reinstate a Business Profile. Do not disclose a code to an unsolicited caller or message sender. [5]
Your 15-minute next step
- Open People and access and write down the primary owner, every other owner, every manager, and pending invitations. [1]
- Confirm the primary owner is company-controlled and recoverable. This is practical continuity guidance derived from Google’s access and account-security controls. [1] [6]
- Add a second trusted owner if there is only one safe owner, then respect Google’s seven-day limitation before depending on that account for removals or transfers. [1]
- Downgrade vendors to manager when owner access is unnecessary, and remove people who no longer have a business reason for access. This least-privilege choice is practical guidance; Google documents the role differences and representative relationship. [1] [4]
- Run Security Checkup on company-owned Google Accounts and verify recovery options and 2-Step Verification. [6]
- Set a quarterly calendar reminder and attach this audit to the company’s employee and vendor offboarding checklist. This cadence is a practical recommendation, not a Google requirement. [1]
Not sure who really owns your listing?
Practical referral: The IT Guys can help Port Saint Lucie-area businesses document current access, separate company control from vendor access, and prepare a safe handoff plan. Contact The IT Guys before the person who knows the old account leaves.
Sources
- Google Business Profile Help — Manage your Business Profile owners & managers (accessed September 18, 2026).
- Google Business Profile Help — Request ownership of a Business Profile (accessed September 18, 2026).
- Google Business Profile Help — Transfer primary ownership of a Business Profile (accessed September 18, 2026).
- Google Business Profile Help — Business eligibility and ownership guidelines (accessed September 18, 2026).
- Google Business Profile Help — Help protect your Google Business Profile (accessed September 18, 2026).
- Google Account Help — Make your account more secure (accessed September 18, 2026).
Scope note: Google can change menus, eligibility rules, verification options, and response paths. This guide reflects the official pages checked at the reporting cutoff above and does not guarantee that a claim or appeal option will appear for every profile.