Add Managers and Remove Ex Staff From Your Profile Safely

Thomas Garner

Oct 7

11 min read

Selective focus photo of iPhone balance on brick pavement

Short answer: treat access to your Google Business Profile the same way you treat keys to the shop. A small number of named people, each with their own account, and a routine you run every time someone joins or leaves. Most owners never think about this until a former manager, a friend who set the profile up years ago, or an agency that no longer works with the cafe still has full control over hours, photos, and replies to reviews.

That profile is not a small thing to leave loose. It controls what customers see when they search for your cafe, what hours show as open or closed, which photos represent the shop, and how every review reply reads in public. This post walks through the roles Google's own help documentation describes, how to add someone properly, how to remove someone who has left, and a simple habit for checking access on a schedule so this never becomes a surprise again.

None of this requires new software or a technical background. It requires deciding, once, who should be able to do what, and then running the same short routine every time your staff changes, which for most cafes is more often than owners expect.

The Roles, in Plain Terms

Google's Business Profile Help documentation on managing users and roles describes access to a profile in terms of a small number of roles rather than a single shared login. In plain terms, one level of access can do essentially everything, including adding and removing other people, editing every field, and controlling the profile as a whole. A second level can manage day to day details, photos, posts, hours, and replies, without necessarily being able to remove the top level access. A third, more limited kind of access can be granted to sites the profile connects with, without handing that person the keys to the profile itself.

The practical point for a cafe owner is this: the strongest level of access should sit with as few people as possible, ideally the owner and one trusted co owner or manager, never a whole staff roster and never an outside vendor by default. The day to day level of access is where most staff and any marketing help you bring in should sit, since it lets someone post updates, upload photos, and respond to reviews without giving them the ability to remove you from your own profile.

This distinction matters most at the exact moment it is usually ignored, when the profile is first set up. A rushed setup, often done by whoever happened to be available that week, a hired designer, a well meaning friend, an agency handling the opening, tends to default to giving that person the strongest access rather than the limited day to day access the situation actually called for. Fixing that after the fact is possible, but it is a great deal easier to set it up correctly from the start.

Think of it the same way you would think about who holds a physical key to the shop. Not every employee needs a key to the register and the safe just to open the front door in the morning. A barista covering an opening shift needs the key that opens the door. The person doing the books needs the key to the safe. Handing everyone the same master key because it is easier to cut one set is exactly the shortcut that causes trouble later, and access to a Google Business Profile works the same way. The strongest level of access is the master key. Most people around a cafe never need to hold it.

Adding Someone the Right Way

Adding a person to your profile means giving them their own account tied to their own name and email, never sharing your login and password with a staff member or outside helper. Google's help documentation is built around individual accounts precisely so that access can be granted and removed person by person, rather than as an all or nothing shared password that everyone with the current staff group chat message happens to know.

The practical sequence is simple. Decide what level of access the new person actually needs to do their job, invite them by their own email address through the profile's user management settings, and confirm they have accepted the invitation. A new hire handling social posts and photo uploads generally needs the day to day level of access described above. A new business partner or a family member taking over ownership responsibilities is a different situation, closer to a genuine ownership transfer, which the Help documentation treats separately from adding a regular manager.

One habit worth building here: add the new person before you remove anyone who is leaving, not after. If a departing manager is removed first and something goes wrong with the new invitation, whether a typo in an email address or a delay in acceptance, the profile can end up with a gap in coverage at exactly the moment you need someone able to respond to a review or fix an hours error. Add first, confirm access works, then remove.

Removing Someone Who Has Left

Removing a person from your profile is done through the same user management settings used to add them, and it takes effect for that specific account without disturbing anyone else's access. This is the actual point of individual accounts rather than a shared login: one person leaving does not mean changing a password everyone else also has to relearn.

The harder case is a departed manager or an outside vendor who is unresponsive, unreachable, or unwilling to cooperate, particularly if that person happens to hold the strongest level of access rather than the limited day to day level. Google's Help documentation on transferring ownership of a profile addresses this kind of situation directly, and it exists precisely because it is common enough to need its own documented path. If you are the current owner and someone else is refusing to remove themselves or hand over access, that documented transfer and dispute process, not a personal argument with the former employee, is the correct route.

This is also the moment to widen the check beyond the Business Profile itself. A departing manager or vendor who had profile access often also had access to other things tied to the shop: a shared email inbox used to receive review notifications, a social account, a scheduling tool, or a website login. None of those are the Business Profile directly, but they are exactly the kind of access that gets forgotten in the same way, for the same reason, and they deserve the same clean removal.

There is also a quieter version of this problem worth naming: someone who has left on good terms but simply was never removed, because nothing went wrong. A former manager who left amicably a year ago and still technically holds access is not a crisis the way an unresponsive former vendor is, but it is still access that should not exist. The habit of removing access promptly should apply the same way whether the departure was difficult or friendly. Good terms are not a reason to skip the step, they are simply a reason it tends to get skipped.

An Offboarding Checklist

A short, repeatable checklist turns this from something you remember to do into something you simply do, every time. Add the replacement person first and confirm their access works. Remove the departed person from the Business Profile itself. Change any shared passwords tied to accounts that are not individually owned, such as a shared email inbox. Review the most recent review replies to make sure nothing was left mid conversation. Review recent posts and offers for anything that needs to be picked up by someone else. Check whether the departing person's phone number or personal email is listed anywhere on the profile itself. Check the email address the profile uses for notifications, in case it was the departing person's own address. Log the date the change was made, in a simple note or spreadsheet, so there is a record of when access changed and by whom.

None of these steps require special tools. Most cafes can run through this list in well under an hour, and doing it every single time someone leaves, rather than only when something goes visibly wrong, is what keeps the profile secure over years of staff turnover.

It is worth saying plainly what this checklist is not. It is not a legal process, and it is not a substitute for whatever employment paperwork a departure already involves. It is simply the specific, profile related steps that tend to get skipped because nobody owns them, folded into a list short enough that someone can run through it the same day a person leaves.

It also helps to decide, once, who on your team owns this checklist, rather than assuming it will happen by default. In a small cafe that is usually the owner directly. In a shop with a general manager, it can sit with that person, as long as the owner still confirms the strongest level of profile access never quietly drifts away from themselves. Either way, the point is that the checklist has a named owner before the next departure happens, not during it.

A Quarterly Access Audit

Even a cafe that handles every individual offboarding correctly can end up with access nobody remembers granting, an agency from two years ago, a friend who helped with the initial setup and was never removed, a former manager whose departure predates whoever currently runs the shop's marketing. A short audit run on a regular schedule, once a quarter is a reasonable rhythm for most cafes, catches these before they become a problem.

The audit itself is five steps. Open the user management settings and list everyone with access. For each name, confirm that person is still actively involved with the cafe. For anyone who is not, remove them following the same checklist used for a normal departure. Confirm the strongest level of access sits only with the current owner or owners, not with a vendor, a former partner, or a staff member whose role has changed. And log the date the audit was run, so the next one has a clear starting point rather than starting from scratch.

A quarterly rhythm is not a rule Google's documentation states; it is a reasonable cadence for a small business with the kind of staff turnover most cafes experience. A shop with very stable, long term staff might reasonably check twice a year instead. The specific interval matters less than having one, written down, that someone is responsible for running.

Tie the audit to something that already happens on a schedule, rather than trying to remember it cold. Many cafes already do a quarterly check of inventory, a seasonal menu review, or a tax related bookkeeping pass. Folding a five minute access audit into whichever of those already exists on your calendar means it survives busy seasons the way a standalone reminder often does not. The goal is not a new obligation. It is one more line added to a habit you have already built.

Frequently Asked Questions

Who should be the primary owner?

The person who runs the business day to day and has the most direct stake in it, typically the owner themselves or a genuine co owner, should hold the strongest level of access, according to how Google's Business Profile Help documentation describes roles. It should not default to whoever happened to set the profile up first, such as a designer, agency, or friend who helped at launch.

Can I just share one login with my whole staff?

No. Google's Business Profile Help documentation is built around individual accounts so access can be added or removed one person at a time. With a shared login, one departure means changing a password everyone else relies on, and nobody can tell afterward who made a given change to hours, photos, or review replies. Invite each person by their own email address through user management instead, giving most staff the day to day level of access and keeping the strongest level with the owner and at most one trusted partner.

What if a former manager will not give up access?

Google's Help documentation on transferring ownership of a profile covers this exact situation, and it exists because it is common enough to need a documented path. If you are the current owner, that formal transfer and dispute process, worked through the official channel, is the correct route rather than trying to resolve it through a personal conversation with the former employee.

Should I remove the old person or add the new one first?

Add first. Invite the new person, confirm their access works, and only then remove whoever is departing. Removing first risks leaving the profile with a gap in coverage if the new invitation has a typo, a delay, or any other hiccup, right when someone needs to respond to a review or fix an hours error.

How often should I audit who has access?

A quarterly check is a reasonable rhythm for most cafes, given typical staff turnover, though Google's documentation does not itself state a required interval. The audit is five steps: list everyone with access, confirm each person is still involved, remove anyone who is not, confirm the strongest access sits only with current owners, and log the date.

What roles does a Business Profile offer?

Google's Business Profile Help documentation on managing users and roles describes a small number of access levels: one that can do essentially everything including adding and removing other people, one for day to day management such as photos, posts, and review replies, and a more limited level for connected sites. Most staff and outside help should sit at the day to day level.

What else should I check besides the Business Profile itself?

A departing manager or vendor with profile access often had access to related things too: a shared email inbox that receives review notifications, a social account, a scheduling tool, or a website login. None of those are the Business Profile directly, but they get forgotten for the same reason, and belong on the same offboarding checklist.

Does removing someone affect anyone else's access?

No. Access is granted through individual accounts, so removing one person in the profile's user management settings affects only that account; everyone else keeps working without a new password to learn. That is the practical payoff of never sharing a login. Still run the rest of the offboarding checklist the same day: add the replacement first and confirm it works, change any shared passwords such as a common email inbox, check which address receives notifications, and log the date. A quarterly access audit then catches anyone missed.

What should the offboarding checklist cover?

Eight steps in order: add the replacement and confirm their access works, remove the departed person from the profile, change any shared passwords tied to non individual accounts, review recent review replies and posts for anything left unfinished, check whether the departing person's phone or email appears on the profile, check the profile's notification email, and log the date.

Is this process different for a cafe with multiple locations?

The same roles and steps apply to each individual profile if a cafe manages separate profiles per location. The main difference is scale: a multi location cafe should track access per location in the same log, since a manager leaving one location does not necessarily mean removing their access from every location's profile, only the ones where their role changes.

Work with Hillcane

Nobody thinks about who has the keys to their Google Business Profile until a former manager still has all of them.

If you want help sorting out who actually has access to your profile, reach Hillcane at hillcane.co/contact or (256) 384-2449.