Team access not working properly

[Vihar Popat]

I want to create restricted user access to the master account where I have my other clients as well which have been onboarded as a part of manage inventory MCM migration.

Here are the steps I am following
1. Create a team
2. assign adunits to the team
3. create a role with only create n view report access
4. assign a user with that role

Now when I logged in with newly created user access the domain param in reporting is exposing all the domains which are not running on that account even though the team which has been assigned to the user has no access to inventory

this has serious implications as the clients can't have visibility or at least reports on their end and I can't share access because the domain param is exposing everything even with restricted access

please suggest what to do if I want to create access where users can only see what's going on there inventory especially they are onboarded with Manage inventory and there are other clients on the same account

[Ad Manager API Forum Advisor]

Hi Vihar,

 

Thanks for reaching out to us.

 

You may refer to this help center article for more information on User role permissions within Ad Manager; and this help center article for Teams. I would recommend testing this out first by assigning specific roles and teams for an account in order to view its capabilities before deploying this.

 

If you would like to restrict users from viewing reports, perhaps you may check the user's permissions under Reporting. If they're supposed to be restricted from checking inventory, perhaps you may check the user's permissions under Trafficking and delivery such as 'View ad units, placements, mobile apps, key-values, and labels'.

 

If you'd like for us to investigate this further, kindly provide screenshots of which information or fields you would not like the users you'll be adding to see. Furthermore, please run getCurrentUser() and send over the complete SOAP request and response logs as well as your network code so that we may further investigate. Kindly send all of these via Reply privately to author option.

 

Regards,

 

Yasmin Gabrielle Padua Ad Manager API Team

ref:_00D1U1174p._5004Q2Tjrhz:ref

[Ad Manager API Forum Advisor]

Hi Vihar,

 

Thanks for providing the requested information.

 

Upon investigating this on my end, I'm afraid that, if you would still like the user to create and view reports, the permission to have the capability requires the following permissions to be selected:

• View my orders and line items
• View creatives

• View ad units, placements, mobile apps, key-values, and labels

• View companies and contacts

 

So I'm afraid there isn't a way to restrict the user from having access to view the domains. That being said, you may opt to reach out to the publisher support team for confirmation via our Support options.