Pinterest Ads Add User Access

Add User Access

Use this runbook to onboard people or partners through Pinterest Business Hub and grant access to ad accounts, tags, catalogs, and other assets.

Prerequisites

• Business Admin rights on the Pinterest Business Hub account.
• The user's work email and confirmation they have (or will create) a Pinterest account.
• Decision on whether they need Owner, Admin, Limited Advertiser, or Analyst role on the ad account.
• List of assets to assign: ad account(s), tags, catalogs, conversion events, or audiences.
• Approval from manager or business owner for the access request.

Invite Workflow

Step 1: Navigate to Business Hub Settings

1. Go to Pinterest Business Hub (business.pinterest.com) and sign in.
2. Click the Settings icon (gear) in the left sidebar.
3. Select People under the Business settings section.

Step 2: Initiate Invite

1. Click Add people or the + icon in the People section.
2. Enter the user's email address (must be associated with their Pinterest account or a new account will be created).
3. Select the assets you want to grant access to (ad accounts, tags, catalogs).

Step 3: Assign Ad Account Roles

1. In the Ad accounts section, select the ad account(s) the user needs access to.
2. For each ad account, choose the role:
   • Owner: Full control including billing, user management, and account deletion. Use very sparingly.
   • Admin: Can manage campaigns, billing, and users. Cannot delete the account.
   • Limited Advertiser: Can create and edit campaigns. Cannot access billing or user management.
   • Analyst: View-only access to reporting and campaign data. Cannot edit campaigns or access billing.
3. Confirm the role assignments are correct.

Step 4: Assign Related Assets (Optional)

Depending on the user's responsibilities, assign access to additional assets:

Pinterest Tag

1. In the Tags section, select the tag(s) the user needs.
2. Choose the role:
   • Admin: Can manage tag settings, view event data, and share access.
   • Analyst: Can view event data and diagnostics only.

When to grant tag access:

• Developers implementing tracking
• Analysts debugging conversion events
• Agency partners managing tag deployment

Catalogs

1. In the Catalogs section, select the catalog(s) the user needs for shopping campaigns.
2. Choose the role:
   • Admin: Can manage catalog settings, feeds, and sharing.
   • Editor: Can edit catalog products and feeds but cannot delete catalogs.
   • Analyst: Can view catalog data only.

When to grant catalog access:

• E-commerce managers uploading product feeds
• Merchandisers managing product availability
• Analysts reviewing product performance

Conversion Events

1. In the Conversion events section, select which conversion events the user can access.
2. Assign appropriate permissions based on their role.

When to grant conversion event access:

• Campaign managers optimizing for specific conversion goals
• Analysts reviewing conversion performance

Audiences

1. In the Audiences section, assign access to specific audience lists.
2. Choose permissions based on user role.

When to grant audience access:

• Media buyers creating retargeting campaigns
• Analysts reviewing audience sizes and match rates

Step 5: Review and Send Invite

1. Review all assigned ad accounts and assets to confirm accuracy.
2. Add a note (optional) explaining the reason for access or the user's role.
3. Click Send invite or Save.
4. Confirm the user appears in the People list with the correct permissions.

Post-Invite Follow-Up

User Acceptance

1. The user receives an email invitation to join the business account.
2. They must accept the invite and sign in to Pinterest to confirm access.
3. If they don't have a Pinterest account, they must create one using the invited email address.
4. After acceptance, their status changes to Active in Business Hub.

Security Setup

1. Require two-factor authentication (2FA) for all Admins and Owners.
   • Go to Business Hub → Settings → Security.
   • Enable 2FA requirement for all users or specific roles.
2. Verify the user has accepted by checking their status in the People list.
3. Test their access by having them log in and confirm they can see the assigned ad accounts and assets.

Documentation

1. Update your access log or ticketing system with:
   • User name and email.
   • Date added.
   • Ad accounts and assets assigned.
   • Roles granted (Owner, Admin, Limited Advertiser, Analyst).
   • Business justification and approver name.
2. Set a review date (e.g., 90 days) to confirm the user still needs access.
3. Capture a screenshot from Business Hub → People showing the user and their assigned assets.

Common Scenarios

Scenario 1: Onboarding an Internal Media Buyer

• Role: Limited Advertiser on specific ad accounts.
• Assets: Ad accounts for their product line or market segment.
• Additional: Access to audiences for retargeting campaigns.
• No access to: Billing, tag management, or user management.
• 2FA: Recommended.

Scenario 2: Adding an Agency Partner

• Role: Admin on client ad accounts (or Limited Advertiser depending on contract).
• Assets: Ad accounts, potentially tags for tracking setup, catalogs for shopping campaigns.
• Additional: Document contract end date and set access review accordingly.
• 2FA: Required for Admins, recommended for Limited Advertisers.

Scenario 3: Granting Finance or Stakeholder Access

• Role: Analyst (reporting only).
• Assets: Ad accounts for the markets or campaigns they oversee.
• No access to: Campaign editing, billing, or user management.
• Additional: May need access to conversion events for performance review.
• 2FA: Recommended.

Scenario 4: Adding a Developer for Tag/API Setup

• Role: Analyst on ad account (if needed for reporting), Admin on tag.
• Assets: Pinterest Tag for the domains they are implementing.
• Additional: May need access to conversion events for debugging.
• No access to: Campaign management or billing.
• 2FA: Required.

Scenario 5: E-commerce Manager for Catalog Management

• Role: Limited Advertiser on ad account, Admin on catalogs.
• Assets: Catalogs for product feed management, ad accounts for shopping campaigns.
• Additional: May need tag access to debug product event tracking.
• 2FA: Recommended.

Troubleshooting

User Didn't Receive Invite Email

• Confirm the email address is correct and not already associated with another Pinterest Business account.
• Check the user's spam/junk folder.
• Resend the invite from Business Hub → People.
• If still not received, ask the user to check their Pinterest notifications.

User Can't Accept Invite

• Confirm they are signed in to Pinterest with the email address that received the invite.
• If they have multiple Pinterest accounts, ensure they're using the correct one.
• Ask them to go directly to business.pinterest.com and check for pending invitations.

User Doesn't See Assigned Assets After Accepting

• Verify the user accepted the invite and is marked as Active in Business Hub.
• Check that assets were actually assigned during the invite (not just business access).
• Re-assign assets if needed by editing the user in Business Hub → People.
• Allow up to 24 hours for permissions to fully propagate in Pinterest's systems.

User Needs Different Roles Than Originally Assigned

• Use the Update Access workflow to change roles without re-inviting.
• See Update Access & Roles for detailed steps.

Guardrails & Best Practices

• Least-privilege principle: Start with the minimum role required (Analyst or Limited Advertiser) and promote only when necessary.
• Owner access is rare: Only grant Owner access to the account holder or business owner. Admins can manage most operations without Owner privileges.
• Use work email addresses: Avoid personal email addresses to maintain control when employees leave.
• Require 2FA for Admins and Owners: Before granting Admin or Owner access, ensure the user has enabled two-factor authentication.
• Document everything: Keep a change log with who approved the access, why it was granted, and when it should be reviewed.
• Review after launch: Revisit permissions 30-90 days after onboarding to confirm the user has the right level of access.
• Separate duties: Financial stakeholders and executives should have Analyst access, not campaign editing rights.

Checklist

• Business Admin access confirmed.
• User's email and required assets documented.
• Business justification and approver noted.
• Invite sent with correct role (Owner, Admin, Limited Advertiser, Analyst).
• Related assets assigned (tags, catalogs, conversion events, audiences).
• User accepted invite and status is Active.
• Two-factor authentication enabled (for Admins and Owners).
• Access logged in internal roster or ticketing system.
• Screenshot captured from Business Hub → People.
• Review date set for future access audit.