Create an access link for a client

Choose Create link, switch on each kind of account you need from the client, check its access level and who receives it, and choose Create link. The box turns into the link, with Copy link, Copy message and Open in email, and a preview of what your client will see. You send the link yourself, from your own email or in a message.

Before you start

• Connect first. The link sends access to what you connected on Connections. Without Meta connected, the Meta rows are switched off with Connect Meta to ask for these. The Google rows marked Guided need no connection: you give the Google user that receives the access. The platforms you add with Add a platform need none either; see "Other platforms" below.
• Who can. Anyone in your agency can create a link.

Steps

1. On Clients, choose Create link.
2. Under What do you need from your client?, switch on the rows you need. Under Meta: Meta ad account, Facebook Page, Instagram account and Meta pixel. Under Google: Google Ads account, Google Analytics property and Google Tag Manager container, and five rows marked Guided: Search Console property, Google Business Profile, Google Merchant Center account, YouTube channel and Google Play Console account. Under the Google rows, Add a platform adds LinkedIn, Microsoft, Klaviyo or Apple, each with its own rows.
3. Check the access level beside each row you switched on (see below).
4. Under Who receives it, check the Business Manager, the Google Ads manager account and the Google user, as far as the link needs them.
5. Fill in Client name if you like. Leave it empty and the client's business name is filled in when they connect.
6. Tick Save as template and name it to keep these choices for the next link; it is ticked for your first link. Once you have templates, the one used last fills the form and Template lets you pick another.
7. Choose Create link.
8. Choose Copy link and send the link to your client, or choose Copy message for a short ready text with the link, or Open in email to open your own mail program with that text and a subject filled in. Add your client's address and send it from your own address.

Access levels

A row you switch on starts at Standard for the Meta ad account, Facebook Page, Instagram account, Meta pixel and Google Ads, and at View for the rest. Each level shows the platform's own name for it:

• Meta ad account: View: View performance; Standard: Manage campaigns; Admin: Manage ad account.
• Facebook Page and Instagram account: View: Insights; Standard: Ads, Insights. Admin is Full control on a Page, and Content, Messages, Community activity, Ads, Insights on Instagram.
• Meta pixel: Standard: Use events dataset; Admin: Manage events dataset. There is no View: the client gives a pixel on Meta's own screen, where Use events dataset is the lowest access Meta offers for a dataset.
• Google Ads account: View: Read only; Standard; Admin.
• Google Analytics property: View: Viewer; Standard: Editor; Admin: Administrator. Access is given on the one property, not the whole account.
• Google Tag Manager container: View: Read; Standard: Publish; Admin: Administrator.
• Search Console property: View: Restricted; Standard: Full; Admin: Owner. It starts at View.
• Google Business Profile: Standard: Manager; Admin: Owner. There is no View: a Business Profile has no role below Manager.
• Google Merchant Center account: Standard; Admin. There is no View: Merchant Center's own screen offers these two when a person is added. Standard cannot work with reports or link Google Ads accounts.
• YouTube channel: View: Viewer; Standard: Editor; Admin: Manager. It starts at View. Owner is never asked for.
• Google Play Console account: View: View app information (read-only); Standard: Manage store presence, Reply to reviews; Admin: Account admin. It starts at View.

• LinkedIn Page: View: Analyst; Standard: Content admin; Admin: Super admin. It starts at View.
• LinkedIn ad account: View: Viewer; Standard: Campaign manager; Admin: Account manager. It starts at Standard.
• Microsoft Advertising account: View: Viewer; Standard: Campaign; Admin: Standard. It starts at Standard. Microsoft's Standard role can add and remove users, so it is our Admin; its Super role is never asked for.
• Klaviyo account: View: Analyst; Standard: Manager; Admin. It starts at View. The Owner role is never asked for.
• App Store Connect account: View: Sales; Standard: Marketing; Admin: App Manager. It starts at View. An App Manager can add users, so it is our Admin; Apple's Admin role is never asked for.

Admin can only be chosen by a verified agency; the list shows needs a verified agency beside it, and a line under the rows says: Admin needs a verified agency. Add your organization number in Settings, then write to the support address to be verified. With a manager account connected, Google Ads access arrives as a manager link, which has no level of its own: what each person at your agency can do follows their role in your manager account. What each level allows on the platforms is in what access an agency should ask for.

Rows marked Guided

A row marked Guided is one your client gives on the platform's own screen, with our steps. Switched on, it says so under the row: Your client does this on Google's own screen with our steps. Your client does not sign in through the link for these; they open the platform, add your Google user at the level you asked for, and say when it is done.

• It counts when you confirm it. Nothing can read these platforms for you yet, so your client's "done" alone does not finish the link. You confirm each one on the client's page once you can see the access; see follow a client's progress.
• Some send you an invitation. A YouTube channel, a Google Business Profile, a Merchant Center account and a Play Console account invite your Google user, and you accept. YouTube and Play Console invitations expire after 30 days. Play Console accepts only the exact address that was invited.
• With other Google rows. If the link also has Google Ads, Analytics or Tag Manager, your client signs in to Google for those and gets the guided ones in the same section, after Confirm access.

The Meta ad account and the Meta pixel carry the same mark: your client signs in with Facebook, then shares them on Meta's own screen, and we read at Meta that it worked.

Other platforms

Under the rows, Add a platform opens a list of the platforms beyond Meta and Google. Choosing one adds its rows to the box, under the platform's own mark, with Remove beside its name. A template remembers the platforms you added. The steps on their own are in add a platform to a link.

• LinkedIn: LinkedIn Page and LinkedIn ad account.
• Microsoft: Microsoft Advertising account.
• Klaviyo: Klaviyo account.
• Apple: App Store Connect account.

Every one of these rows is marked Guided: your client gives the access on the platform's own screen with our steps, nobody signs in through the link, and it counts when you confirm it. You connect nothing for them. Instead, the first time you switch on a row, the box asks under it where the access goes:

• LinkedIn: Profile address and Name on the profile. LinkedIn gives access to a person, so name the person at your agency. Your client searches for the name and checks the profile. A LinkedIn Page row also says Follow your client's Page first: LinkedIn only lets a Page add someone who follows it and is within three degrees of their connections. For an ad account, your client can only add someone who is their 1st, 2nd or 3rd-degree connection.
• Microsoft Advertising and Klaviyo: Access email. It starts as your own address. A shared one, like access@youragency.com, keeps working when staff change. One address serves both.
• App Store Connect: First name, Last name and Email. Apple invites a person by name and email; it does not have to be an Apple Account yet.

A value that does not look right is refused in words, for example Enter a profile address, like https://www.linkedin.com/in/your-name. What you typed is saved: the next link shows it under Who receives it with Change, and asks for nothing. You can also edit it under Other platforms on Connections. Changing it changes your next links, not the ones you have sent. Your client sees it under Access goes to, marked as given by you.

Three of these send you an invitation that you accept: Microsoft Advertising (it expires after 30 days), Klaviyo (the link in the email expires after 24 hours, and Klaviyo asks you to log out of any other Klaviyo account first) and App Store Connect (it expires after 3 days). If mail about clients is on for you, you get a mail when your client says an invitation is sent. LinkedIn adds the person at once, with nothing to accept.

The receiving Google user

Google shares Analytics and Tag Manager with a person's Google account, not with a manager account. When you switch on either, the builder asks for a Google user for Analytics and Tag Manager, filled in with the Google account you connected. Your client sees that address under Access goes to.

With a row marked Guided switched on under Google, the field is called Google user. That is the address your client adds on Google's own screen, so it has to be a person's Google Account: Search Console does not accept an email group, and Play Console lets you accept only with the exact address that was invited.

If you switch on Google Ads without a connected manager account, the field is called Google user for Google Ads, and access arrives as an invitation to that address. If Analytics or Tag Manager is on as well, there is one field, Google user for Analytics and Tag Manager, and the Google Ads invitation goes to that address too. An invitation counts once it is accepted.

Sending the link

• The message. Copy message and Open in email give a short text in your agency's name: what the client is asked for, the link, and that they sign in to Meta and Google themselves and never share a password with you. For a link with only rows marked Guided, it says they give the access themselves on Google's own screen, or on each platform's own screen when the link has more than one platform. Adcato sends nothing and keeps no client address. The same two buttons are beside Copy link on the client's page and on the client's box on Clients.
• Language. A new link opens in Norwegian if your agency's country in Settings is Norway, and in English otherwise. A template keeps its language. The client can switch at the bottom of the box.
• In a chat. Pasting the link into a chat app draws a card that says your agency would like access to the client's accounts, naming only the platforms on the link, with your logo if you uploaded one. The preview does not mark the link as opened.
• In Instagram, Messenger or LinkedIn. If the client taps the link there, it can open inside that app, where Google does not allow its sign-in. The box then tells the client how to open the page in Safari or Chrome. The Facebook part works inside the app.

When it worked

The box says Your link is ready, or The link for and the client's name, shows the link and a preview under What your client will see. Choose Follow this client to open the client's page, or Create another link. The client is on Clients as Not opened until someone opens the link.

If it did not work

A line above the button says what is missing, for example Analytics and Tag Manager are shared with a Google user. Enter its email address. or Enter the Access email that receives Klaviyo account. Fix that field and choose Create link again.