Remove User Access
Use this runbook to completely revoke access for users who no longer need Pinterest Business Hub or ad account permissions. This includes employee offboarding, contractor project completion, and agency relationship termination.
When to Remove Access
- Employee termination or resignation
- Contractor or freelancer project completion
- Agency contract termination
- Role change where user no longer needs Pinterest access
- Security incident or suspicious activity
- User request to be removed from the account
- Compliance audit findings requiring access removal
Prerequisites
- Business Admin rights on the Pinterest Business Hub account.
- Confirmation that the user should be completely removed (not just role-adjusted).
- Approval from manager or business owner for the access removal.
- Documentation of the reason for removal.
- Knowledge of any active campaigns or work the user was managing.
Removal Workflow
Step 1: Document Current Access
Before removing the user, document their current permissions:
- Go to Pinterest Business Hub (business.pinterest.com) and sign in.
- Click the Settings icon (gear) in the left sidebar.
- Select People under the Business settings section.
- Find the user to be removed.
- Take a screenshot showing their current ad accounts, roles, and assets.
- Document all assigned permissions for audit trail and potential restoration needs.
Step 2: Transfer Ownership (If Necessary)
If the user is an Owner on any ad accounts or assets, ownership must be transferred before removal:
- Identify all assets where the user has an Owner role.
- For each asset:
- Navigate to the asset settings (ad account, catalog, etc.).
- Add a new Owner or promote an existing Admin to Owner.
- Verify the new Owner has accepted and can access the asset.
- Only after ownership transfer is complete, proceed to remove the user.
Critical: Pinterest requires at least one Owner per asset. You cannot remove the last Owner without transferring ownership first.
Step 3: Transition Active Work
Before removing access, ensure continuity of active campaigns and projects:
- Review active campaigns: Identify campaigns the user is managing or recently edited.
- Reassign responsibilities: Notify team members taking over the user's work.
- Download reports: If the user created custom reports or audiences, document or transfer them.
- Update documentation: Remove the user from internal documentation, runbooks, and contact lists.
Step 4: Remove User from Business Hub
- In Business Hub → Settings → People, locate the user.
- Click the Edit icon or the user's name.
- Click Edit details and select Remove employee from the dropdown.
- Confirm the removal when prompted.
- Verify the user is no longer listed in the People section.
For partner access removal:
- Go to the Partners tab instead of Employees.
- Click the partner name.
- Click the minus icon (-) next to the ad account to revoke access.
Step 5: Verify Removal
- Refresh the People list to confirm the user is gone.
- Check ad accounts to ensure the user no longer appears in the user list.
- Verify tags, catalogs, and other assets no longer show the user.
- If possible, ask the removed user to attempt login and confirm they cannot access assets.
Post-Removal Follow-Up
Security Verification
- Confirm removal: The user should no longer see your business account when they log in to Pinterest.
- Monitor for activity: Watch for any unexpected changes in ad accounts or campaigns.
- Review API access: If the user had API credentials, revoke or rotate access tokens.
- Check integrations: Verify the user didn't have personal integrations or automations that still have access.
Documentation Update
- Update access log with:
- Date of removal.
- User name and email.
- Reason for removal.
- Who approved the removal.
- Assets they previously had access to.
- Capture final screenshot from Business Hub showing the user is removed.
- Update org chart or internal documentation to reflect the removal.
- Store removal documentation for compliance and audit purposes.
Communication
- Notify the user (if appropriate) that their access has been removed.
- Inform the team if the user was managing campaigns or assets.
- Update stakeholders on ownership transfers or campaign reassignments.
Common Scenarios
Scenario 1: Employee Termination
Steps:
- Document all current permissions and take screenshots.
- Transfer ownership of any assets where the user is an Owner.
- Reassign active campaigns to other team members.
- Remove user from Business Hub immediately upon termination.
- Verify removal and monitor for any unauthorized activity.
- Update access log and notify relevant team members.
Urgency: Immediate removal required, ideally within 24 hours of termination.
Scenario 2: Contractor Project Completion
Steps:
- Verify the project is complete and no active work is pending.
- Download any reports or data the contractor created.
- Transfer ownership if the contractor was made an Owner.
- Remove user from Business Hub.
- Document completion date and final deliverables.
Urgency: Remove within 1-2 weeks of project completion or contract end date.
Scenario 3: Agency Relationship Termination
Steps:
- Review contract for offboarding requirements or transition periods.
- Coordinate with agency on transition timeline.
- Transfer ownership of campaigns, catalogs, and assets to internal team.
- Download historical data and reports before removal.
- Remove agency user(s) from Business Hub after transition complete.
- Revoke any API access or integrations the agency set up.
- Document final billing period and campaign performance at handoff.
Urgency: Remove after transition period (typically 1-4 weeks, per contract).
Scenario 4: Role Change (No Longer Needs Pinterest Access)
Steps:
- Confirm the user's new role truly doesn't require Pinterest access.
- Document their current permissions for potential future restoration.
- Transfer any active responsibilities to other team members.
- Remove user from Business Hub.
- Update internal role documentation.
Urgency: Remove within 2-4 weeks of role change, after transition complete.
Scenario 5: Security Incident or Suspicious Activity
Steps:
- Immediately remove user access without delay.
- Document the incident with date, time, and observed activity.
- Review recent campaign changes and ad account activity.
- Check for unauthorized spending or campaign modifications.
- Rotate API credentials and access tokens if compromised.
- Notify security team and management.
- Preserve logs and screenshots for investigation.
Urgency: Immediate removal, within minutes of detection.
Troubleshooting
Cannot Remove User (Owner Requirement)
Issue: Pinterest prevents removal because the user is the only Owner on an asset.
Solution:
- Identify which assets the user owns (ad accounts, catalogs, tags).
- Add or promote another user to Owner on each asset.
- Wait for the new Owner to accept and confirm access.
- Retry user removal after ownership transfer is complete.
User Still Sees Assets After Removal
Issue: User reports they can still access ad accounts or assets.
Solution:
- Verify the user was actually removed (not just role-changed) in Business Hub.
- Confirm the user is logged in to the correct Pinterest account.
- Ask the user to log out and log back in to refresh their session.
- Wait 24-48 hours for permissions to fully propagate.
- If issue persists, contact Pinterest Business Support.
Need to Restore Removed User
Issue: User was removed by mistake or needs access again.
Solution:
- Re-invite the user using the Add User Access workflow.
- Refer to your pre-removal documentation to restore the same permissions.
- Reassign ad accounts, tags, catalogs, and other assets.
- Verify the user can access all previously assigned assets.
- Document the restoration with date, reason, and approver.
Active Campaigns Stop Delivering After Removal
Issue: Campaigns pause or underperform after user removal.
Solution:
- Check if the user was the only Owner on the ad account.
- Verify that campaign ownership wasn't tied to the removed user.
- Ensure remaining team members have Admin or Limited Advertiser access.
- Review campaign settings for any user-specific configurations.
- Re-enable or re-launch campaigns as needed.
Guardrails & Best Practices
- Never remove the last Owner: Always ensure at least one Owner remains on each asset.
- Document before removing: Capture screenshots and permission lists before removal.
- Transfer work first: Ensure active campaigns and projects are reassigned before removing access.
- Immediate removal for security: Don't delay removal in security incidents or employee terminations.
- Communicate removals: Inform relevant team members when removing users, especially if they managed shared campaigns.
- Keep audit trail: Maintain detailed logs of all access removals for compliance and audits.
- Use Update Access for partial removal: If the user only needs some permissions removed, use the Update Access workflow instead of complete removal.
- Verify removal: Always confirm the user can no longer access assets after removal.
Checklist
- Business Admin access confirmed.
- Reason for removal documented and approved.
- Current permissions documented and screenshots captured.
- Ownership transferred for all assets where user is Owner.
- Active campaigns and work reassigned to other team members.
- User removed from Business Hub → People.
- Removal verified (user no longer appears in People list).
- API credentials revoked or rotated (if applicable).
- User confirmed unable to access assets (if possible).
- Access log updated with removal details.
- Final screenshot captured showing removal.
- Relevant team members notified of the removal.
- Internal documentation updated (org chart, runbooks, contact lists).