Getting a second token with readonly access

[Assaf Frank]

Hi,

We currently have a standard token (read/write) but would like to offer a service to customers that only requires read access.

We would like to display the "grant access"  message to the users that we would like access to "read" only and not to fully manage their accounts (I understand this message is according to the token access).

Is there a way to as for ready only access from the user - even if the token has full read/write access?

If not, can we under the same Manager ID get a second token with only read access for this purpose?

Thanks,

Assaf

[Bharani Cherukuri (AdWords API Team)]

Hello Assaf,

Access levels such as Read-only, Standard and Administrative access are associated with the email address to make the API requests. It does not depend on the developer token access. AdWords API access level depends on the level of access given to the account in the UI. You will be able to set the access level while adding a new user and they will have the same access in the API. You can check the access level associated with the email address by logging into the AdWords account > Account Settings > Account access. 

If you have authenticated as read-only client, you will only be able to make GET calls to download the reports. Email-only accounts cannot make AdWords API calls at all. You can also refer to this document on how to set the access levels on your AdWords account for additional guidance. In this case, it is not required to request a second Developer token. You will only need to manage access levels depending on the level of access to be granted for your Manager account. Let me know if you have any other questions. 

Thanks,

Bharani Cherukuri

AdWords API Team

[di...@easyleads.com]

Hi,

We with Assaf are co-workers (well, he is my manager), I think you didn't understand the question correctly (or we don't understand the answer).

In genera, our company provides services to AdWords users via API. Before a customer can start working we ask him to grant us a refresh token (via the OAuth mechanism).

We have a developer token with Standard access, created an application in the developers console and use the Secret of this application to get the refresh token.

The scopes we ask for are https://www.googleapis.com/auth/adwords and https://www.googleapis.com/auth/analytics.readonly. As the result when granting the access our customers see the following messages:

XYZ wants to

• 
  View your Google Analytics data
• 
  Manage your AdWords campaigns

So far so good. Recently we've developed a report generating tool, for this we only need to read data, without any modification operations. Customers don't trust a product that suggests an analyzing tool, but requests managing permissions.

We would like to change the message from "Manage your AdWords campaigns" to "View your AdWords campaigns".

In Analytics, for example, this can easily be achieved by using https://www.googleapis.com/auth/analytics.readonly instead of https://www.googleapis.com/auth/analytics, but a scope https://www.googleapis.com/auth/adwords,readonly doesn't exist.

We Googled it and the only solution that was mentioned is issuing a new developer token with Read-only access level for another Manager. This is a kind of headache (approvals, reviews, regulations etc) and all this just to "downgrade" the approved access level.

What is the best possible way to achieve the goal?

Thanks

[Bharani Cherukuri (AdWords API Team)]

Hello, 

Unfortunately, AdWords API Scope is for both read and write access to the API. Since there isn't a separate AdWords API scope for read-only, it is not possible to get a similar message during the OAuth setup flow. The access rights of users on a account is not tied with the developer token. Hence applying a new developer token will not help in your case as well. The clients will be able to confirm the level of access by verifying the access level for that user in the AdWords UI.

Thanks,

Bharani, AdWords API Team

On Tuesday, September 12, 2017 at 11:43:56 AM UTC-4, Assaf Frank wrote:

[di...@easyleads.com]

Ok, I see.

Maybe you are going to add this scope? The lack of it really impacts reporting tools, it's much harder to convince customers to grant managing permissions rather than read-only permissions, they feel much less secure.

Thanks

[Bharani Cherukuri (AdWords API Team)]

Hello, 

This feature is currently not supported by the AdWords API. However, I will share your feedback with the team. Please keep an eye on our blog for any announcements or updates about this feature.

Thanks,

Bharani, AdWords API Team

On Tuesday, September 12, 2017 at 11:43:56 AM UTC-4, Assaf Frank wrote:

[Jason Lowry]

+1 on this feature. An AdWords read-only API scope would be hugely beneficial to our company as well. We would need the option to upgrade/migrate them to the full version if they became a paying customer.

[Bharani Cherukuri (AdWords API Team)]

Hi Jason, 

Thank you for your interest. I have shared your feedback with the team. Please keep an eye on our blog for more information on upcoming updates about this feature.

Regards,

Bharani, AdWords API Team

[Ashish Pathak]

Hi Bharani,

Any update about feature request for read only access from Adwords API? is it possible now?

[googleadsapi...@google.com]

Hello Ashish, 

The Read-only access scope from AdWords API only currently not available. As I mentioned in my previous post, the access would be same for UI and the API. Please keep an eye on our blog for any future updates regarding this.

Thanks,

Bharani, AdWords API Team

=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
    http://googleadsdeveloper.blogspot.com/search/label/adwords_api
    https://developers.google.com/adwords/api/community/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

Was your question answered? Please rate your experience with us by taking a short survey.
If not -- reply to this email and tell us what else we can do to help.

Take Survey

Also find us on our blog and discussion group:
http://googleadsdeveloper.blogspot.com/search/label/adwords_api
https://developers.google.com/adwords/api/community/