Permissions fo Google Integrations (security issue Client Admin can see other Agency accounts)
R
Richard Quinn
Normally as an agency we connect Google Ads and Google Analytics using the agency login -- which is master account with access to various clients. If:we use the GoHighLevel Integration to connect our Google Account for the client, and then we give client access to Settings (which they need to update company profile, teams etc)then the client Admin can also see and change the setting for the Settings > Integrations. In theory the client admin, can change the settings to view the Google Ads or Google Analytics of other agency accounts! Feature Request: Lock integration changes to the user/login who makes the initial integration. So if we use agency account to add Google Accounts, only the agency login can change this drop-down for which Ads and Analytics accounts can be accessed AND/ORAllow Agency to choose which integrations are locked. (Bear in mind w still want the client to be able to add their own Google Account as this is required for calendar setup in GA)Note: the same problem would appear to apply if we do the Facebook Integration, but in most cases we would ask the client to do the integration directly, as they find it easier to "find" their Facebook logins!Thx
HIGHLVL-I-6194
Log In
Activity Feed
Sort by
W
Willie Meyer
Fully agree with this. Even if we can just get an update restriction on this like you currently have with a Facebook ads account, only the person that integrated the account has access to change or use the dropdown to select other accounts (If I am not mistaken).
The other issue is that currently when you integrate a google account everyone has access to all of that accounts google sheets in automations. If we could get a separate integration for a specific folder associated with a specific account?
Currently my work around to this has been to add one Google Workspace Account that comes with my service fee. So, if a client signs up and I have access to their host provider I create a Workspace account, admin@client-domian.com, which I then use for the integrations. However, this only works when my client doesn't already have emails setup and although I do not give them permissions to automations so that I can manage this, they still can see my other clients from the integrations section which then leads to me restricting that as well and need to be invited to all their accounts to help set this up. Overall, this is just a lot more admin work that needs to be managed because of such a small thing.