Invite client accounts for read-only access

[Michael Cosgrove]

We are creating a reporting tool for adwords accounts.  I have code that creates an invitation to a prospective client to allow access.  They can than accept it in their adwords account and we display campaign and adgroup metrics and segments.

This all works, but two things remain a mystery after a lot of searching:

We only need and want to display performance reports and are not "managing" the accounts.  I gather that is "read-only" access.  But there seems to be no way to request read-only.  When the client goes to accept the invitation, they see warnings saying that we will be able to alter their accounts on many ways.

>>> Is there a way to invite for read-only access?

>>> Is there a way for the client to accept but only for reporting (read-only)?

------------

Separately, I have seen third-party tools like ours that seems to be able to launch a window that allows the prospective clients to enter their credentials and grant access immediately.  But I see nothing in the API that would allow me to code such a method.

>>> Any ideas/help on this?

Thanks in advance for any help.

[Peter Oliquino]

Hi Michael,

Regarding the access levels such as "read-only" access for AdWords accounts, I'm afraid that this is currently not possible via the AdWods API. This is done via the AdWords UI using email addresses and you may refer to this guide as to how.

In the AdWords API perspective, allowing access is granted to manager accounts in order for them to be able to manage client accounts by linking them into its hierarchy. For more information regarding this, you may refer to our managing accounts guide.

Thanks and regards,

Peter

AdWords API Team

[Michael Cosgrove]

Thanks, Peter.  If somebody with an adwords account invites us via an email address, will we then be able to access their account via the API?

[Peter Oliquino]

Hi Michael,

Once you have been invited and you have accepted it, you can then proceed with generating your OAuth2 credentials using the same email address which was invited for access. Using an approved developer token along with the credentials you created, you may then be able to access the client account(s) which you have been given access to.

You may also refer to this discussion for more information on the access granted to users via the AdWords UI (email invite).

Best regards,

Peter

AdWords API Team

[Ankit Singhaniya]

Does this mean both the manager account has admin access over the client account? The new manager account can also delete the client account? Will that be the case?

[Ankit Singhaniya]

Hi Peter,

In the context of what you said

In the AdWords API perspective, allowing access is granted to manager accounts in order for them to be able to manage client accounts by linking them into its hierarchy.

Does this mean they have full admin access on the client account? They can do anything? Can they delete this account?

[Peter Oliquino]

Hi Ankit,

When you generate OAuth2 credentials using the email address of a manager account, the said credentials will allow the user to access all client accounts under that specific account. As for administrative access, the manager account should have administrative access to client accounts created directly under it. In the event that it does not have adminitistrative acces, you will need to set it via the AdWords UI and you may refer to this discussion for more information. Doing so will then enable the manager account to manage user access to the specific managed account.

As for deleting accounts, developers will not be able to do this via the AdWords API, but they can terminate the links between the manager and the client account and you may refer to this guide as to how.

[Ankit Singhaniya]

Hi Peter,

Your answer was very helpful. I just had one more doubt. I create a client account. Create a Budget Order for the account. Invite another manager account via the AdWords API. Will this new person access the account via the manager account will be able to modify the budget order?

[Peter Oliquino]

Hi Ankit,

In this scenario, the client account will only be accessed by the user/developer that has the correct OAuth2 credentials using the AdWords API. This means that, only the OAuth2 credentials created using an email address which has access to the account can view/modify the information of that specific client account.

To know which email addresses has access to the client account, you may login to AdWords and go to Gear Icon > Account settings > Account access. I hope this helps.

Best regards,

Peter

AdWords API Team