# Google Business Profile organization account, explained > A Google Business Profile organization account lets an agency manage client listings under its own login. The client grants access and keeps ownership. Source: https://mosaicbrowser.com/blog/business-profile-organization-account ## Google Business Profile organization accounts, for agencies A Google Business Profile organization account lets an agency manage client listings under its own login. The client grants access and keeps ownership. ![Organization versus Client's login, each name in its own tile: Manage the listing, never sign in as the client](https://mosaicbrowser.com/covers/business-profile-organization-account.webp) A Google Business Profile organization account is the account an agency signs in with to manage its clients' listings. The client stays the owner of each listing and shares it with the agency's organization; the agency never signs in as the client. It replaces the oldest habit in local marketing, a spreadsheet of clients' Google passwords, with access that each side can see and either side can end. ## How an organization account is laid out Google's help pages describe four levels, and they are easier to hold in your head as folders: 1. **The organization** is the agency itself, and an agency normally needs only one. Its owners are the agency's own people, signed in with addresses on the agency's domain. 2. **Business groups** sit inside it, and each holds a set of listings. Most agencies make one group per client, or one per brand for a franchise. 3. **The listings** are the clients' Business Profiles. They arrive in a group because the owner shared them, either by inviting the group or by accepting the agency's request for access. 4. **User groups** decide which of the agency's staff can work on which business groups, so an account manager sees their own clients' listings and not the whole book. Two details catch people at sign-up. The address you create the organization with should be on your agency's domain, not a Gmail account, and it should not already be managing Business Profiles; the same goes for staff you add. And if a client's listing does not turn up when you search for it to request access, the client can add the agency from their side instead. Mosaic is a desktop app Email yourself the link and open it on your computer. How it works: Bulk actions ## Why not just sign in as the client Plenty of agencies still do, because it is faster on day one. Every reason against it shows up later. A Google account is not a listing. The client's login usually opens their Gmail, their Drive, their Ads billing and their Analytics too. Signing in as them to answer a review hands your agency the keys to all of it, which neither side wanted to sign up for. Google also notices the sign-in. A login from an agency's office, in another city, on a device the client has never used, is the kind of sign-in Google's account security asks questions about. The usual result is a verification prompt on the client's phone at the moment your colleague is trying to post an update, and a client asking why Google says someone signed in from somewhere they have never been. Then the relationship ends. With a shared password, offboarding is a password change the client has to remember to make, and until they do the agency still holds the account. With an organization account, the client removes the agency's access and that is the whole job. We wrote up the rest of that day in [offboarding a client's browser profiles](https://mosaicbrowser.com/blog/client-offboarding-browser-profiles). The same reasoning runs through every platform an agency touches. Meta, Seller Central and Google each have a way to add a person under their own login with chosen permissions, and [giving a virtual assistant access without the password](https://mosaicbrowser.com/blog/va-access-without-password) walks through all three. A spreadsheet of passwords is the fallback when a platform has nothing better, and [the shared password spreadsheet](https://mosaicbrowser.com/blog/shared-password-spreadsheet) has why it fails. ## Setting one up for an existing client list The order that keeps a migration tidy: 1. Create the organization with an agency-domain address that manages nothing yet, and add a second owner from your agency so the organization never depends on one person. 2. Make a business group for each client, named the way your client list names them. 3. Send each client the request for access, or give them the group's ID so they can invite it. A one-line email explaining why ("so we stop signing in as you") gets most of them done in a day. 4. Once a listing appears in its group, remove any old personal logins of yours from that client's profile, and ask the client to change any password you were given. 5. Set up user groups so each account manager reaches only their own clients. The first hour with a new client, including where this request fits among the other access you need, is in [client onboarding: the first hour](https://mosaicbrowser.com/blog/client-onboarding-first-hour). ## Where an anti-detect browser fits Not in the Business Profile part. An organization account is the right tool there, and nothing about a browser improves on access Google grants on purpose. Mosaic fits around it. An agency's people still have sign-ins that have no organization equivalent, such as a client's website admin or a directory listing, and those are cleaner kept apart: one profile per client, with that client's logins and two-factor codes in its own Credentials, so a session from one client never sits in the same cookie jar as another's. And checking how a listing looks to a searcher in the client's town is a job for a profile whose proxy exits there, with the timezone and language matched to that exit. Your agency's own organization login belongs in one profile of its own. That way it is never mixed with any client's cookies. ## Questions ### What is a Google Business Profile organization account? It is the account type Google provides for third parties, such as agencies, that manage Business Profiles on behalf of their owners. The agency signs in as itself, and each listing it manages has been shared with it by the owner. ### Can I use my Gmail address for an organization account? Google's help pages ask for an address on your agency's own domain, and one that is not already managing Business Profiles. Staff added to the organization need the same kind of address. ### Does the client lose ownership when an agency manages their profile? No. The client stays the owner and grants the agency access. Ending the relationship means removing that access, not handing over a password or recovering an account. ### How do I keep clients' listings separate inside one organization? With business groups. Most agencies make one group per client, and user groups decide which staff can work on which business groups. ## Related [Giving a virtual assistant access without handing over the password](https://mosaicbrowser.com/blog/va-access-without-password): Seller Central, Meta and Google each let you add a virtual assistant under their own login, with chosen permissions. A shared password is the fallback. [The first hour in the browser with a new client](https://mosaicbrowser.com/blog/client-onboarding-first-hour): A social media client onboarding checklist for the browser: ask for partner access, not passwords, then a project, a proxy in their market and their 2FA. [What to do with a client's browser profile when the contract ends](https://mosaicbrowser.com/blog/client-offboarding-browser-profiles): Agency client offboarding goes wrong when access is revoked before the client can sign in. Confirm the handover, export, then trash the profile by id. [The shared password spreadsheet, and what replaces it](https://mosaicbrowser.com/blog/shared-password-spreadsheet): A spreadsheet of client logins breaks two-factor sign-in and leaves nothing to revoke. Partner access first, then one vault per login with its code. [A quarterly check of who can reach each client account](https://mosaicbrowser.com/blog/quarterly-access-audit): A social media account access audit is two lists per client: who the platform says has access, and which of your profiles hold a login. Each gap is a finding.   [Anti-detect inside your own browser: the extension model](https://mosaicbrowser.com/blog/extension-based-isolation): SessionBox keeps a cookie jar per session inside your own browser. Logins stay apart; the GPU, fonts and canvas a page reads are the same in all of them. ## Mosaic, on your own computer The browser this blog is about: its own Chromium, fingerprints from real machines and a proxy exit per profile. Free holds 3 profiles. Pro is $49 a month for any number. Mosaic is a desktop app Email yourself the link and open it on your computer.