Hi Jungwook,
Thank you for reaching out to Google Ads API support. Regarding developer tokens, please note that a developer token can be used to access any account in the system. What limits access is the log in credentials that a
refresh token is created from. For example, if
a...@c.b.com creates a refresh token, then using that generated refresh token
a...@c.b.com can access all accounts that
a...@c.b.com would be able to access when logging in to the UI through the API. Any accounts that
a...@c.b.com has no access to in the UI won't be accessible to
a...@c.b.com in the API.
In light of the above, to control access to hierarchies all that has to be done is not have
a...@c.b.com be a user in another MCC hierarchy and then
a...@c.b.com won't have any access in another account hierarchy.
Feel free to get back to us.
Regards,
 |
| Aryeh |
| Google Ads API Team |
|
|
| |

ref:_00D1U1174p._5004Q2Wvkxk:ref