Google Search Console has released a security update around user permissions and controls management where you can better manage the ownership tokens.
Ownership tokens are used when people verify your site in Search Console, Merchant Center and other Google products. Sometimes people who have access to your profiles no longer should.
This update makes it easier to manage such access and remove those tokens and permissions when they are no longer needed.
What Google said. Google wrote:
What it looks like. In the user and permissions interface, under the “unused ownership tokens” you will see a screen like this where you can click “remove” to remove access to those ownership tokens:
How it works. Here are the steps to take to manage these ownership tokens:
- Visit the Users and permissions interface
- Click “Unused ownership tokens”
- Choose the tokens you’d like to remove and click “Remove” (see screenshot below)
- Click “Verify removal” to update the unused ownership token
Why we care. It is always a good idea to ensure the right people have access to your data and Search Console properties and more importantly that the wrong people do not have access to it. As Nir Kalush from Google wrote, “The update rolled out today lets you verify the removal of the unused verification token so that removed owners cannot regain access to the property.”
So check your tokens and remove those who should not have access.
