TikTok Ads User Management

User Management Overview

Manage who has access to your TikTok Ads accounts, what they can do, and how to maintain proper access controls. This guide covers the TikTok Ads Manager permission model and best practices for enterprise teams.

Access Architecture

TikTok Business Center vs. Ads Manager

TikTok has two levels of access management:

Recommendation: Use Business Center if you manage more than one ad account or need to share assets (pixels, catalogs) across accounts.

Access Hierarchy

TikTok Business Center (optional)
├── Business Center Roles (Admin, Employee)
│   └── Asset Access (Ad Accounts, Pixels, Catalogs)
│
└── Ad Account Level
    └── Ad Account Roles (Admin, Operator, Analyst)

Roles & Permissions

Ad Account Roles

Business Center Roles

Detailed Permission Breakdown

Admin Capabilities:

• Create, edit, pause, delete campaigns
• View and download all reports
• Create and manage Pixels
• Create and manage audiences
• Access billing and payment settings
• Invite and remove users
• Manage API access and integrations

Operator Capabilities:

• Create, edit, pause, delete campaigns
• View and download all reports
• Create and manage Pixels
• Create and manage audiences
• View billing history (no editing)
• Cannot manage users

Analyst Capabilities:

• View campaigns (no editing)
• View and download all reports
• View Pixel configuration
• View audiences
• No billing access
• No user management

Adding Users

Quick Reference

Via Business Center

1. Log in to TikTok Business Center
2. Go to Members → Add Member
3. Enter email and select Admin or Employee role
4. Click Next → Assign Assets
5. Select which Ad Accounts to share
6. For each account, choose the role level

Via Ads Manager Direct

1. Log in to TikTok Ads Manager
2. Select correct account in top-left dropdown
3. Click Settings (gear icon) → User Management
4. Click + Invite
5. Enter email address
6. Select role: Admin, Operator, or Analyst
7. Click Send Invite

Invite Expiration

• Invites expire after 72 hours
• User must accept from the same email address
• If expired, admin must send a new invite
• Pending invites visible in User Management

Updating Roles

When to Change Roles

Role Change Process

1. Go to Settings → User Management
2. Find the user in the list
3. Click Edit (or the user row)
4. Select new role from dropdown
5. Click Save

Note: Role changes take effect immediately. No re-invite needed.

Best Practices

• Minimize Admins: Only 1-2 admins per account
• Default to Analyst: Start with read-only, upgrade as needed
• Review quarterly: Audit who has what access
• Document changes: Log role changes with reasons

Removing Users

When to Remove Access

• Employee offboarding/termination
• Contractor engagement ends
• Vendor relationship concludes
• Account consolidation
• Security incident

Removal Checklist

## Pre-Removal Tasks
- [ ] Transfer pixel ownership if they created any
- [ ] Transfer audience ownership
- [ ] Update any automations they own
- [ ] Remove from scheduled reports
- [ ] Document API tokens they may have generated

## Removal Steps
- [ ] Navigate to User Management
- [ ] Click Remove/Revoke for the user
- [ ] Confirm removal
- [ ] Screenshot for audit trail

## Post-Removal Tasks
- [ ] Rotate shared API tokens
- [ ] Update internal access documentation
- [ ] Close access request ticket
- [ ] Notify security/IT team

Removal from Business Center

1. Go to Business Center → Members
2. Find the user
3. Click Remove or Revoke Access
4. Select which assets to revoke (or all)
5. Confirm removal

Removal from Ads Manager

1. Go to Settings → User Management
2. Find the user
3. Click Remove
4. Confirm in dialog
5. User immediately loses access

Access Request Process

Request Template

## TikTok Ads Access Request

**Requester:** [Name]
**Email:** [TikTok account email]
**Account:** [Advertiser ID or name]
**Role Requested:** [Admin / Operator / Analyst]
**Business Justification:** [Why they need this access]
**Duration:** [Permanent / Until date]
**Manager Approval:** [Name and confirmation]

Approval Workflow

1. Requester submits access request
2. Manager approves business need
3. Account Admin reviews request
4. Account Admin grants access
5. Requester accepts invite
6. Admin confirms access granted
7. Admin logs change in access register

Audit & Compliance

Quarterly Access Review

## TikTok Ads Access Audit - Q[X] 20XX

### Account: [Advertiser ID]

| User | Email | Role | Last Active | Still Needed? | Action |
|------|-------|------|-------------|---------------|--------|
| Jane Doe | jane@co.com | Admin | 2025-12-01 | Yes | Keep |
| John Smith | john@co.com | Operator | 2025-10-15 | No | Remove |
| Analyst Bot | bot@co.com | Analyst | 2025-12-09 | Yes | Keep |

### Findings
- [List any issues found]

### Actions Taken
- [List changes made]

### Next Review: [Date]

Access Log Template

Troubleshooting

Common Issues

Error Messages

Available Guides

• Add User Access - Step-by-step invite process
• Remove User Access - Secure offboarding checklist
• Update Access & Roles - Role change procedures