What are the different permission levels in Google Search Console?

Search Console has three permission levels for people: owner (verified or delegated), full user and restricted user. Owners control access and settings, full users see everything and take most actions, and restricted users see most data but can do very little. Separately, associates are people or accounts linked to act for your site or use some of its data, such as a connected Google Analytics property; they can't open your Search Console account.

The permission matrix

This is Google's own table from Managing owners, users, and permissions, regrouped:

Requesting indexing from URL Inspection also needs owner or full-user permission, as Google's recrawl guide notes.

Adding and removing people

1. Open the property, then Settings and Users and permissions. Only owners see this page.
2. Click Add user, enter the person's Google Account email and choose a permission level.
3. To end someone's access, open the menu beside their name and choose Remove access.
4. A verified owner only loses access when their verification token (file, tag, DNS record and so on) is removed from the site as well.

Limits: up to 100 full, restricted and associate users per property, delegated owners until the property reaches 500 owners in total, and no cap on verified owners. Email groups can't be added.

Picking levels in practice

• Give owner to the few people who manage access, and keep at least one verified owner on a company account.
• Give full to anyone who submits sitemaps, requests indexing or validates fixes.
• Give restricted to people who only read reports.

The difference between the two owner types is explained in owners versus users.

How AutoPSEO helps

AutoPSEO has its own access model, so reporting can be shared without changing Search Console permissions. Invite teammates as editors or viewers, scoped to some or all of your properties, or share a saved report through a link that can carry a password and an expiry date (sharing and team access).