On this page5 sections
Published October 22, 2026.
List the properties and the users
Export the user list for each analytics property and tag manager container. Record the role, the email domain, the last activity where available, and whether the account is a person or a service.
Include agency accounts and temporary contractors. Access that was granted for a project often outlives the project.
Check the highest privileges first
Administrators can change settings, filters, and access. Review admin accounts before view-only accounts. Confirm that each admin still needs the role and that the business controls at least one owner account.
A vendor-owned owner account is a continuity risk. Transfer ownership to a business-controlled account before the contract ends.
Review data-sharing and integrations
List connected BigQuery exports, looker connections, tag manager links, and any audience sharing to ad platforms. Record the destination, the owner, and the purpose. Disable connections that are no longer used.
Do not leave a test connection enabled. It can export data indefinitely.
Record the review and set the next date
Save the export, the decisions, and the date. Remove access that is no longer needed and confirm the removal. Set the next quarterly review.
A review that only adds users is not a review.
Related reading
For the supporting routine, see this guide and this guide. To discuss the workflow, contact us.
