Prerequisites
- Admin or Super Admin access to the Microsoft Advertising account
- User's email address (must be associated with a Microsoft account)
- Determined appropriate access level for the user
- Manager approval for access request (recommended)
Add User via Microsoft Advertising Interface
Step 1: Navigate to User Management
- Sign in to Microsoft Advertising
- Click your account name in the top right
- Select Accounts & Billing from dropdown menu
- Click User management in the left sidebar
Alternative Path:
- Click Tools icon (gear) in top menu
- Under "Accounts," select User management
Step 2: Initiate User Invitation
- Click Invite user button (usually in top right)
- A modal/form will appear for user details
Step 3: Enter User Information
Email Address:
- Enter the user's email address
- Must be associated with a Microsoft account
- Can be:
- Microsoft email (@outlook.com, @hotmail.com, @live.com)
- Work email linked to Microsoft account
- Any email converted to Microsoft account
First Name and Last Name (optional):
- Helps identify user in interface
- Appears in change history logs
Step 4: Select Access Level
Choose appropriate permission level:
Super Admin:
- Full account control including billing
- Can add/remove users
- Select for: Account owners, finance managers
Advertiser Campaign Manager:
- Campaign and budget management
- Cannot change billing or add users
- Select for: Campaign managers, agency leads
Standard User:
- Edit campaigns, keywords, and ads
- Cannot manage budgets or billing
- Select for: PPC specialists, day-to-day managers
Read Only (Viewer):
- View-only access to campaigns and reports
- Cannot make any changes
- Select for: Executives, analysts, clients
Step 5: Select Accounts (if applicable)
If you manage multiple accounts:
- All accounts: User gets access to all current and future accounts
- Selected accounts: Choose specific accounts from list
Best Practice: Select specific accounts for clarity and security.
Step 6: Send Invitation
- Review user details:
- Email address correct
- Access level appropriate
- Accounts selected (if applicable)
- Click Send invitation
- Confirmation message appears
- User receives email invitation
Step 7: User Acceptance
User receives email:
- Subject: "You've been invited to Microsoft Advertising"
- From: Microsoft Advertising (no-reply@microsoft.com)
- Contains Accept invitation link
User clicks link:
- Redirected to Microsoft sign-in page
- Signs in with Microsoft account
- Reviews access details
- Clicks Accept
- Gains immediate access to account
Important: Invitation expires after 30 days. Resend if needed.
Verification Checklist
After adding a user, verify:
- User received invitation email (check spam folder)
- User accepted invitation successfully
- User appears in User management list with correct access level
- User can sign in and view appropriate accounts
- User can perform expected actions (edit campaigns if Standard, etc.)
- User cannot perform restricted actions (billing if not Super Admin)
- Access documented in user management log
- Manager approval documented
- Calendar reminder set for access review (90 days)
Common Issues & Solutions
User Doesn't Receive Invitation Email
Causes & Solutions:
| Cause | Solution |
|---|---|
| Email in spam/junk folder | Check spam folder, add no-reply@microsoft.com to safe senders |
| Email address typo | Verify email address spelling, resend invitation |
| Corporate email filter blocking | Contact IT to allowlist Microsoft Advertising emails |
| Email not associated with Microsoft account | User must create Microsoft account first at account.microsoft.com |
Resend Invitation:
- Navigate to User management
- Find user with "Pending" status
- Click Resend invitation
- User receives new email
User Cannot Accept Invitation
Common Issues:
Wrong Microsoft Account:
- User may have multiple Microsoft accounts
- Must sign in with the exact email address invitation was sent to
- Try signing out completely and signing in with correct email
Browser Issues:
- Clear browser cache and cookies
- Try incognito/private browsing mode
- Try different browser (Chrome, Edge, Firefox)
Microsoft Account Suspended:
- User's Microsoft account may be suspended or restricted
- User must resolve account issues at account.microsoft.com
- Contact Microsoft support if needed
User Has Access But Cannot See Account
Solutions:
Account Selector:
- User may need to select account from account switcher
- Click account name in top left
- Select correct account from dropdown
Wrong Microsoft Account:
- Verify user signed in with correct email
- Some users have personal + work Microsoft accounts
- Sign out and sign in with correct account
Manager Account Confusion:
- If account is linked to Manager Account, user may need access via Manager Account
- Verify user is accessing through correct path
Delayed Propagation:
- Wait 5-10 minutes for access to propagate
- Refresh browser or try again later
Cannot Invite User (Button Greyed Out)
Causes:
Insufficient Permissions:
- Only Admin and Super Admin can add users
- Verify your own access level
- Request Admin access if needed
Session Expired:
- Sign out and sign back in
- Refresh browser
Account Limit Reached (unlikely):
- Microsoft Advertising typically has no hard user limit
- Contact Microsoft support if you suspect limit
Security Best Practices
Before Adding User
- Verify Identity: Confirm user's identity via phone call or in-person
- Verify Email: Ensure email is correct and belongs to user
- Business Need: Confirm legitimate business reason for access
- Manager Approval: Obtain written/email approval from user's manager
- Background Check: For Super Admin access, verify user background
During Addition
- Minimum Access: Grant lowest permission level necessary
- Limited Scope: If possible, grant access to specific accounts only
- Document: Record date, time, approver, and business justification
- Inform User: Send welcome email with guidelines and expectations
After Addition
- Monitor Activity: Review user's first actions in change history
- Training: Provide Microsoft Advertising best practices documentation
- Schedule Review: Set 30-day and 90-day access review reminders
- Two-Factor Auth: Encourage (or require) user to enable 2FA
Next Steps
After adding user access:
- Monitor user activity and adjust permissions if needed
- Review access regularly to ensure still appropriate
- Remove access when user leaves or changes roles
- Document all access changes in audit log
- Schedule quarterly access reviews