Access multiple MCC accounts using AdWords API

[API_DCH]

Hello,

 

My company have multiple MCC accounts. We are planning to retrieve data from Google Adwords account to generate some reports for internal use. I applied and received a developer token for one of my MCC account. I can retrieve AdWords data that belong to this account. In addition, I would like to retrieve data that belongs to other MCC accounts. When I try it says "USER_PERMISSION_DENIED".

How can I achieve this, I applied another token but was rejected because only one token per entity allowed as per Google AdWords policy.

If anyone have the same situation please provide me the details how can I retrieve data from multiple MCC account using a single developer token in this case.

Is there any other ways to implement this. Please let me know. Thanks in advance.

 

Regards

Sam

[Milind Sankeshware (AdWords API Team)]

Hi Sam,

The USER_PERMISSION_DENIED that you are getting in the API is because there is no link between the manager account authenticated in the request and the client account specified in the headers. To check if manager account is linked with the client account, could you please follow the two steps given below?

1. Perform a CustomerService.getCustomers() and check for the results. If you are using the credentials of a manager account, it will list the MCC accounts and any other accounts that user has direct access to.
2. You can then perform a ManagerCustomerService.get() for the Manager account from results of step 1. The target account should be listed in this call. If not, the credentials cannot access that account.

If you are still facing any issues, could you please share the SOAP request and response logs along with CID and the email Id of the user authenticating the API call? You could choose 'Reply privately to author' option while responding. 

Thanks,

Milind, AdWords API Team.

[API_DCH]

Hi,

Thanks for your email.

Actually, I am using .net client library to access Adwords data, since we have multiple MCC accounts, there are bunch of Client id's associated to each MCC account. I have a table that contains each Client Id and authentication details .

I have developed a C# program which will read all the accounts one by one and retrieve AdWords data and store them in to local sql table. I have single approved developer token. How can I access client account data that belong to another MCC account. Is there any additional permission needs to be setup in order to access data for the Client ID's that belongs to another MCC account. Since there is not authorization I am receiving an error "USER_PERMISSION_DENIED". Please provide me how to retrieve that data or how to link the current token to another MCC accounts. I appreciate your help and thanks in advance.

Thanks

Sam

[Milind Sankeshware (AdWords API Team)]

Hi Sam,

If you are looking to access the client account under the same hierarchy, the credentials of the MCC account will be able to make a call to any accounts under that hierarchy. To access the account in a different hierarchy, you will either need to link those accounts or add the API user as a user on that specific account. You can add a user by referring to this guide. Please refer this guide to link your account. Once you add or link the account, you would be able to make a call with your credentials. If you are still facing an issue please share the MCC id and account id you would like to access.

[暐陳]

Sry, I met ran into the same problem,Multiple Mcc account but just be granted one basic level developer token.

You said add the API user as a user.We have many users in the Mcc account, how do I now which one is the API user?

[Google Ads API Forum Advisor Prod]

Hi 暐陳,

Thank you for reaching out. Can you confirm if you are trying to access a different MCC account but are not able to do so? If so, the API user that needs to be added to that account is the user that is making the API request. The email address of the user that is authenticating the API call must be added as a user to the account that they are making the call against. You can add this user to the account by going to the UI -> Tools & Settings -> Account access. If this is not what you are looking for, please elaborate on your concern so that I can better assist you. If you have any additional questions, let me know.

Regards,
Danica, Google Ads API Team

ref:_00D1U1174p._5004Q21k2Vs:ref

[暐陳]

Hi Danica,

Thank you for your response.

However, I don't know which email address is represent API user.I have access permission to these MCC accounts in Google Ads platform. And I don't know which one is the API user account.

And the other way I find the page https://support.google.com/google-ads/answer/7459601 which maybe not helpful for me, cause one MCC account is TWD currency(with Basic level token), the other is JPY currency. If link  the JPY MCC account with TWD currency(with Basic level token), the currency of JPY MCC account  will be influent.

[Google Ads API Forum Advisor Prod]

Hi 暐陳,,

To make sure I understood correctly, is your concern that you are not sure which email address is tied to the API? Are you looking to access the account via API yourself? Please clarify these points. It is also worth noting that any of the users listed under the Users tab will be able to access the account via API with proper OAuth2 credentials. 

Additionally, you have provided a link pertaining to linking accounts to your manager account. Is this what you are looking to accomplish? 

Thanks,

[暐陳]

Yes, I access the account via API myself, and the APIs & services is connect to my email.(I own the OAuth 2.0 Client IDs and credentials of my app.)

And this email address is also have the access permission to both MCC accounts.

Furthermore, I share the link cause I heard I have two way to use if I want to access multiple MCC account with one developer token.

First is link the MCC account to the other, however I'm not sure the currency will be affected if one MCC account  become the sub-account of the Mcc account(With basic level token).

Second is add API user to both  MCC account. If that mean the email own the OAuth 2.0 Client IDs and credentials of my app, which already had the access permission to both MCC accounts.

[Google Ads API Forum Advisor Prod]

Hi 暐陳,

Thank you for reaching out. I’m a colleague of Danica. If you are trying to access both MCC accounts, you don’t need to link these two MCC accounts. You could create OAuth2 credentials for each MCC account and make API calls with the same developer token. You need to create OAuth2 credentials for each MCC account separately as the authorization code and refreshToken are solely dependent on the account that you are logged in with when you generate the OAuth2 credentials. The other way is to link the two MCC accounts and grant the Admin access for the MCC account with higher level. The currency would not be affected if you connect the two MCC accounts.


Thanks and regards,
Xiaoming, Google Ads API

 

ref:_00D1U1174p._5004Q21k2Vs:ref

[暐陳]

Hi Xiaoming,

This is what I want! Thank you~~~

I tried your solution and succeeded.Thank you for the help of you and Danica. You are awesome.