Amazon Advertising User Management | OpsBlu Docs

Amazon Advertising User Management

How to manage access to Amazon Advertising accounts, roles, and billing controls.

User Management Overview

Amazon Advertising (including Sponsored Ads and DSP) manages permissions at the account level. Roles include Administrator (full control and billing), Editor (campaign edits), Viewer (read-only), and Billing (payments only). DSP seats may add Operator or Analyst depending on contract. Confirm whether the request is for Sponsored Ads, DSP, or both.

Amazon Advertising operates across two main products with different access models: Sponsored Ads (Sponsored Products, Brands, Display) uses advertiser profiles and manager accounts; DSP (Amazon Demand-Side Platform) uses seats and advertisers. Understanding which product the user needs access to is critical before proceeding.

Access model & roles

Amazon structures access differently for Sponsored Ads vs. DSP:

Sponsored Ads:

  • Administrator: Full control including user management, billing, campaign management, and reporting. Admins can invite users, manage payment methods, and access all advertiser profiles under a manager account.
  • Editor: Can create, edit, and optimize campaigns within assigned advertiser profiles. Cannot manage users or billing.
  • Viewer: Read-only access to campaigns and reports. Can export data but cannot edit anything.
  • Billing: Access to invoices and payment history without campaign visibility. For accounts payable teams.

Roles apply per advertiser profile or manager account. Users can have different roles across different advertiser profiles.

DSP:

  • Admin/Seat Manager: Full control over the seat including user management, billing, pixel configuration, and advertiser management. Can limit users to specific advertisers or line items.
  • Operator: Campaign and line item management, creative upload, reporting. Cannot manage users or billing. Most common role for traders.
  • Analyst: Read-only access to reporting and dashboards. Cannot edit campaigns or line items.
  • Finance: Access to invoices and billing (availability varies by contract).

Authentication: All invitations require an Amazon account. Encourage users to use work emails for auditability, though personal Amazon accounts can be granted access if needed.

Common use cases

Agency onboarding: Assign Editor (Sponsored Ads) or Operator (DSP) access limited to the advertiser profiles or DSP advertisers they will manage. For agencies managing both Sponsored and DSP, add them to both products separately. If they need reporting for client presentations, consider adding Viewer/Analyst access for stakeholders.

Client access: Clients typically need Viewer (Sponsored Ads) or Analyst (DSP) access to monitor performance. Avoid giving clients editing or admin access to prevent accidental budget changes.

Internal team members: Campaign managers should receive Editor/Operator access. Finance teams should get Billing or Admin (if they need user management). Data analysts should receive Viewer/Analyst access.

Contractor or temporary access: Use Editor/Operator with a defined expiration date documented in your ticketing system. Amazon doesn't automatically expire users, so manual review is required.

Adding users

When adding a user, you'll need Admin rights and the user's Amazon-associated email. Amazon sends an email invitation that expires after a set period (typically 7-30 days depending on the product).

For Sponsored Ads:

  1. Sign in and select the correct advertiser profile or manager account
  2. Go to Settings → User management and click Add user
  3. Enter the email, choose role (Administrator/Editor/Viewer/Billing), and select marketplace access
  4. Send invite and verify user appears as Pending

For DSP:

  1. Open DSP console and select the correct seat
  2. Navigate to Admin → User Management and click Invite User
  3. Enter email, assign role (Administrator/Operator/Analyst), and set advertiser permissions
  4. Send invitation and confirm pending status

Updating roles

Role adjustments in Amazon Advertising take effect immediately for active users. Pending invitations must be resent if the role needs to change before acceptance.

When to update:

  • User promoted to Admin to manage billing or other users
  • User transitioning to analytics role needs Viewer/Analyst access
  • Agency contract scope changes, requiring different advertiser access
  • Finance needs billing visibility added or removed

Update process:

  1. Access User management (Sponsored Ads) or Admin → User Management (DSP)
  2. Locate user and edit their role or advertiser permissions
  3. Save changes and verify updated permissions
  4. Notify user of the change

Removing & offboarding

Removing a user is permanent. Always transfer asset ownership before removal.

Offboarding checklist:

  1. Identify campaigns, line items, audiences, or budgets the user manages
  2. Transfer ownership to another user
  3. Remove user from User management screens
  4. Capture screenshot for compliance
  5. Update internal rosters and SSO directories
  6. Remove from invoice recipients if they had billing access

After removal:

  • Verify user removed from both Sponsored Ads and DSP if they had both
  • Document removal with date, approver, and reason
  • Schedule quarterly access review reminder

When to Use These Runbooks

  • Onboarding agency or vendor to manage Sponsored Products or DSP deals
  • Removing access after contract ends or user leaves team
  • Adjusting access so finance can view invoices without editing campaigns
  • Granting temporary access for product launches or seasonal campaigns

Available Guides

Change Control Checklist

  • Identify the correct manager ID and account for Sponsored Ads vs. DSP
  • Decide whether billing access is required
  • Capture screenshots from Settings → User management (Sponsored Ads) or Admin → User Management (DSP)
  • Update internal rosters once the change is complete
  • Note which product(s) the user has access to (Sponsored, DSP, or both)
शीर्ष पर वापस जाएँ