Principles
- Least privilege. We ask for the lowest level of access that lets us do the work, and read-only wherever possible.
- Named access, never shared passwords. You add a named Mr.Ooi user or our agency account. We never ask for your own login or one-time passwords.
- Time-limited. Access is reviewed monthly and removed within 7 days of the engagement ending.
Access we typically request
| System | Access level | How you grant it |
|---|---|---|
| Google Analytics 4 | Viewer (Analyst only if we configure events) | Admin > Property access management |
| Google Search Console | Restricted user (Full only for verification tasks) | Settings > Users and permissions |
| Google Business Profile | Manager (never Primary owner) | Business Profile > People and access |
| Google Tag Manager | Publish only during an agreed change window | Admin > User management |
| Google Ads, Meta, LinkedIn | Read-only, or Standard via our manager account | Account access settings |
| CMS (WordPress, Shopify and others) | Named staff account with the narrowest role that works; staging site first | Your CMS user settings |
| Hosting, CDN, DNS | Only when needed, for a named task, then removed | Your provider's team settings |
How we protect access
- Multi-factor authentication on every Mr.Ooi account, including Google Workspace and our password manager.
- Any credential that must be shared is stored only in our business password manager, never in email, chat or documents.
- Changes to live sites happen in an agreed window, are logged in a change log you can see, and are tested on staging where available.
- Laptops are encrypted, screen-locked and kept up to date.
Offboarding
Within 7 days of an engagement ending we remove every Mr.Ooi user from your systems, delete stored credentials, confirm in writing and send you the final access list. You should also review your own access lists.
Ask for the access log
Clients can request a list of who at Mr.Ooi had access to which system, and when, by writing to security@mrooi.com.