Update Access & Roles
Guide for modifying TikTok Ads Manager permissions when responsibilities change. Role changes take effect immediately without requiring re-invitation.
When to Update Roles
Common Role Change Scenarios
| Current Role | New Role | Typical Reason |
|---|---|---|
| Analyst | Operator | Promoted to campaign management |
| Operator | Admin | Taking over billing/user management |
| Admin | Operator | Setup complete, reduce privileged access |
| Operator | Analyst | Moving to reporting-only role |
| Admin | Analyst | Transitioning off account management |
Role Change Triggers
Promotions/Expansions:
- Analyst proves capable, needs to manage campaigns
- Operator taking over account administration
- Temporary upgrade for specific project
Reductions/Downgrades:
- Account setup complete, Admin no longer needed
- Project phase ended, full access not required
- Security best practice: minimize privileged access
- Compliance requirement: least-privilege access
Step-by-Step: Change Role in Ads Manager
Step 1: Access User Management
- Log in to TikTok Ads Manager
- Verify you're an Admin on this account
- Click Settings (gear icon) → User Management
Step 2: Find the User
- Locate the user in the member list
- Note their current role
Step 3: Edit the Role
- Click on the user row or Edit button
- In the role dropdown, select new role:
- Admin - Full access
- Operator - Campaign management
- Analyst - Read only
- Click Save or Update
Step 4: Verify Change
- Confirm the new role appears in the user list
- Take screenshot for records
- Notify the user of their new access level
Step-by-Step: Change Role in Business Center
Step 1: Access Member Settings
- Go to business.tiktok.com
- Click Members in left sidebar
- Find and click on the user
Step 2: Modify Asset Permissions
- Under Assigned Assets, find the ad account
- Click Edit for that account
- Select new permission level:
- Admin
- Operator
- Analyst
- Click Save
Step 3: Optionally Change BC Role
If changing their overall Business Center role:
- Click Edit next to their name
- Change from Admin ↔ Employee
- Note: Employee role limits what assets they can be assigned
Role Comparison Quick Reference
| Capability | Admin | Operator | Analyst |
|---|---|---|---|
| View campaigns | Yes | Yes | Yes |
| Create campaigns | Yes | Yes | No |
| Edit campaigns | Yes | Yes | No |
| Pause/delete campaigns | Yes | Yes | No |
| View reports | Yes | Yes | Yes |
| Download reports | Yes | Yes | Yes |
| Manage Pixels | Yes | Yes | No |
| Create audiences | Yes | Yes | No |
| View billing | Yes | View only | No |
| Edit billing | Yes | No | No |
| Manage users | Yes | No | No |
| API access | Yes | Configurable | No |
Temporary Access Upgrades
For temporary elevated access (campaigns, projects):
Process
- Document the temporary need with end date
- Upgrade the role
- Set calendar reminder for downgrade date
- On end date, revert to original role
- Document the change
Template
## Temporary Access Upgrade
**User:** analyst@company.com
**Account:** 7890123456789
**Original Role:** Analyst
**Temporary Role:** Operator
**Start Date:** 2025-12-10
**End Date:** 2025-12-31
**Reason:** Q4 campaign launch - needs to make optimizations
**Approved By:** manager@company.com
**Reminder Set:** Yes - 2025-12-31
**Reversion Record:**
**Reverted Date:** [To be filled]
**Reverted By:** [To be filled]
Best Practices
Minimize Admin Access
- Target: 1-2 Admins per account maximum
- Rationale: Reduces risk of accidental billing changes, unauthorized user additions
- Action: After account setup, downgrade setup Admins to Operators
Default to Least Privilege
- Start users with Analyst access
- Upgrade only when they demonstrate need
- Review and downgrade when projects end
Document All Changes
Log every role change:
## Role Change Record
**Date:** 2025-12-10
**User:** jane.doe@company.com
**Account:** 7890123456789
**Previous Role:** Operator
**New Role:** Admin
**Changed By:** admin@company.com
**Reason:** Previous Admin left, Jane taking over account management
**Ticket:** ACCESS-2025-102
Set Review Dates
- Schedule quarterly reviews of all access
- Flag elevated access (Admin) for more frequent review
- Remove or downgrade stale access
Workflow for Common Changes
Analyst → Operator (Promotion)
- Verify business need with manager
- Change role in User Management
- Brief user on new capabilities
- Document change
- Schedule 90-day review
Admin → Operator (Reduction)
- Confirm another Admin exists
- Transfer any Admin-only assets if needed
- Change role
- Verify user can still perform needed tasks
- Document change
Emergency Admin Upgrade
If urgent Admin access needed (billing issue, user emergency):
- Change role immediately
- Document reason and urgency
- Set 24-48 hour reminder to review
- Revert if temporary need
- File documentation
Troubleshooting
| Issue | Cause | Solution |
|---|---|---|
| Can't edit user | Not an Admin | Ask Admin to make change |
| Role dropdown disabled | Platform issue | Refresh, try different browser |
| Change not saving | Validation error | Check all required fields |
| User can't see new capabilities | Session cache | Have user log out and back in |
| Can't downgrade last Admin | Platform restriction | Add another Admin first |
Communicating Role Changes
Notification Template
Subject: TikTok Ads Manager Access Update
Hi [Name],
Your access to [Account Name] TikTok Ads account has been updated:
Previous Role: [Operator]
New Role: [Analyst]
Effective: Immediately
What this means:
- [You can now view all campaigns and reports]
- [You cannot create or edit campaigns]
If you have questions or believe this is an error, please contact [Admin Name].
Best,
[Your Name]
Audit Compliance
Quarterly Review Checklist
## Q[X] Access Review - TikTok Ads
### Account: [ID]
| User | Current Role | Last Activity | Appropriate? | Action |
|------|--------------|---------------|--------------|--------|
| admin@co.com | Admin | Today | Yes | Keep |
| buyer@co.com | Operator | Last week | Yes | Keep |
| old@co.com | Operator | 90+ days ago | No | Downgrade to Analyst |
| extern@co.com | Analyst | Never | No | Remove |
### Actions Taken:
- Downgraded old@co.com to Analyst
- Removed extern@co.com
### Reviewed By: [Name]
### Date: [Date]