Remove User Access
Secure process for revoking TikTok Ads Manager access when users no longer need it.
When to Remove Access
Immediate Removal Required
| Trigger | Urgency | Notes |
|---|---|---|
| Employee termination | Immediate | Same day as offboarding |
| Security incident | Immediate | Within hours |
| Contractor engagement ends | Same day | Per contract terms |
| Account compromise suspected | Immediate | Investigate after removal |
Scheduled Removal
| Trigger | Timeline | Notes |
|---|---|---|
| Project completion | Within 1 week | After final handoff |
| Vendor contract ends | On end date | Coordinate with vendor |
| Role change (no longer needs access) | Within 1 week | After transition |
| Access audit finding | Within 2 weeks | Per audit timeline |
Pre-Removal Checklist
Before removing a user, especially Admins or Operators:
## Pre-Removal Tasks
### Asset Ownership Transfer
- [ ] Identify pixels created by user → Transfer to active Admin
- [ ] Identify audiences created by user → Transfer ownership
- [ ] Check catalog feeds they manage → Reassign
- [ ] Review automations/rules they created → Reassign or document
### Data & Reports
- [ ] Remove from scheduled report recipients
- [ ] Export any reports they may need
- [ ] Document any custom dashboards they built
### API & Integrations
- [ ] Identify API tokens they may have generated
- [ ] Plan token rotation after removal
- [ ] Check third-party integrations using their credentials
### Documentation
- [ ] Note their current access level
- [ ] Document reason for removal
- [ ] Screenshot current User Management page
Step-by-Step: Ads Manager Removal
Step 1: Verify Your Access
- Log in to TikTok Ads Manager
- Confirm you're an Admin on this account
- Select the correct account in top-left dropdown
Step 2: Navigate to User Management
- Click Settings (gear icon)
- Select User Management
- Find the user to remove in the list
Step 3: Remove the User
- Click on the user row or the ... menu
- Select Remove or Revoke Access
- Confirm in the dialog box
- User is immediately removed
Step 4: Verify Removal
- Refresh the User Management page
- Confirm user no longer appears in the list
- Take screenshot for audit trail
Step-by-Step: Business Center Removal
Option A: Remove from Specific Account
- Go to business.tiktok.com
- Navigate to Members
- Click on the user's name
- Under Assigned Assets, find the ad account
- Click Revoke for that account
- User loses access to that account only
Option B: Remove Completely
- Go to Business Center → Members
- Find the user in the list
- Click Remove Member
- Confirm removal
- User loses access to all assets
Special Cases
Removing the Last Admin
You cannot remove yourself if you're the last Admin. Process:
- Add another trusted person as Admin
- Have them remove your access (or you remove yourself after)
- Or: Transfer ownership before removal
Removing Someone Who Created Critical Assets
Before removal:
- Go to Assets → Events (Pixels)
- Find pixels they created
- Edit each pixel → Change owner to active Admin
- Repeat for Audiences, Catalogs, etc.
Removing API Token Holders
If user had API access:
- Remove their account access first
- Go to Assets → API (if accessible)
- Revoke any tokens associated with their account
- Or: Regenerate all tokens as precaution
Post-Removal Actions
Immediate (Same Day)
- Screenshot showing user removed
- Update access log/spreadsheet
- Close access revocation ticket
- Notify manager/requester of completion
Within 24 Hours
- Rotate any shared API tokens
- Verify no scheduled reports still going to them
- Check integrations still working (didn't depend on their auth)
Within 1 Week
- Update internal access documentation
- Inform security/IT of completion
- File audit evidence (screenshots, logs)
Documentation Template
## Access Removal Record
**Date:** 2025-12-10
**Removed User:** john.doe@company.com
**Account:** 7890123456789 (Brand Name)
**Previous Role:** Operator
**Removed By:** admin@company.com
**Reason:** Employee offboarding - last day 2025-12-09
**Ticket/Request ID:** OFFBOARD-2025-099
### Pre-Removal Tasks Completed
- [x] Transferred pixel ownership to admin@company.com
- [x] No audiences owned by user
- [x] Removed from scheduled reports
- [x] API tokens rotated
### Evidence
- Screenshot attached: user_removal_20251210.png
Emergency Removal Process
For immediate security concerns:
Step 1: Remove Access (Priority)
- Log in as Admin immediately
- Go to User Management
- Remove user without delay
- Document reason briefly
Step 2: Secure the Account
- Review recent activity (if suspicious)
- Check for unauthorized campaigns or changes
- Rotate API tokens
- Check billing for unauthorized charges
Step 3: Document and Report
- Screenshot all evidence
- Document timeline of events
- Report to security team
- File incident report per company policy
Troubleshooting
| Issue | Cause | Solution |
|---|---|---|
| Can't find Remove option | Not an Admin | Contact account Admin |
| User still has access | Cached session | They need to log out/in |
| Can't remove last Admin | Platform restriction | Add new Admin first |
| Removal failed | System error | Retry, contact support if persists |
| User in multiple accounts | Multi-account access | Remove from each account separately |
Compliance Considerations
Data Retention
- Removal is immediate; user cannot access data
- Historical data (campaigns, reports) remains intact
- Activity logs may still show their past actions
Audit Trail
- TikTok logs user removal in Activity Log
- Access your audit log: Settings → Account Info → Activity Log
- Retain screenshots for your compliance records
GDPR/Privacy
- Removing account access doesn't delete their TikTok Business account
- Their personal TikTok account is unaffected
- Platform data retention per TikTok's policies