X Ads Remove User Access | OpsBlu Docs

X Ads Remove User Access

How to revoke user access and offboard team members from X (Twitter) Ads. Covers account deletion, API key revocation, partial access removal, and.

Remove User Access

Follow this process when an employee leaves a project, an agency rotation ends, or a billing contact needs to be replaced in X Ads. Properly offboarding users protects your account from unauthorized activity and maintains compliance.

Removing a user from X Ads is immediate and permanent. Once removed, you cannot restore their access - you must re-add them if needed.

When to Remove Users

Remove X Ads access when:

  • An employee leaves the organization (resignation, termination, retirement)
  • An agency contract ends or the agency no longer manages the ad account
  • A user changes roles and no longer requires X Ads access
  • Security or compliance teams request removal due to policy violations
  • A temporary contractor's project concludes
  • The user has been inactive for 90+ days
  • Finance or legal requests removal to reduce liability
  • The user's X account has been deactivated or suspended
  • Billing or payment responsibilities are being reassigned

Deactivation Triggers

Common triggers that should prompt immediate user removal:

  • Employee termination: Revoke access on the same day to prevent unauthorized activity
  • Agency contract termination: Remove agency users within 24 hours of contract end
  • Role change: If a campaign manager transitions to a non-advertising role, remove access
  • Security incident: If credentials are compromised or suspicious activity is reported, immediately remove access
  • Quarterly access review: Remove users who haven't logged in for 90+ days
  • X account deactivated: If the user's X account is deactivated or suspended, remove them from all ad accounts

Pre-Removal Assessment

Before removing a user, complete this assessment:

Identify owned assets

Check whether the user created or manages:

  • Campaigns: Active or paused campaigns they built
  • Custom audiences: Audience segments they created (tailored audiences, lookalike audiences)
  • Conversion events: Conversion tracking pixels or events they configured
  • Scheduled posts: Promoted posts or ads scheduled for future dates
  • Automated rules: Campaign automation rules they set up

Transfer ownership

While X Ads doesn't have formal "ownership" of most assets, ensure:

  1. Another Account Administrator or Ad Manager knows which campaigns, audiences, and conversion events the user managed
  2. Document any specialized knowledge they had (e.g., audience targeting strategies, conversion event mappings)
  3. Transfer any external documentation or credentials they maintained (e.g., UTM parameter guides, creative asset libraries)

Confirm approval

Obtain written approval from:

  • The user's manager or the ad account owner
  • Finance or HR if the removal is due to termination or contract end
  • Security or compliance if the removal is part of an audit or investigation

Save the approval email or ticket reference for your access log.

Removal Steps

Once you've completed the pre-removal assessment:

Step 1: Access user management

  1. Sign in to X Ads at ads.x.com as an Account Administrator
  2. Navigate to the correct ad account
  3. Click avatar → Edit access to account from the top-right corner

Step 2: Review current access

  1. Locate the user in the access list
  2. Review their current role (Account Administrator, Ad Manager, or Analyst)
  3. Screenshot this page for your access log before making changes

Step 3: Remove the user

  1. Find the user in the access list
  2. Click Remove access or the X/delete icon next to their name
  3. Confirm the removal when prompted
  4. The user will immediately lose access to the ad account

Important: If the user was an Account Administrator, ensure at least one other Administrator remains before removing them to prevent account lockout.

Step 4: Verify removal

  1. Refresh the access list and confirm the user no longer appears
  2. Screenshot the updated access list for your "after" record

Post-Removal Tasks

After removing the user:

Update documentation

  • Access log: Record the removal with details:
    • User @handle and name
    • Date removed
    • Reason for removal (e.g., "Employee termination," "Agency contract ended")
    • Approver name
    • Ad account(s) they had access to
    • Role they had (Administrator, Ad Manager, Analyst)
  • SSO/IAM system: Remove the user from any X Ads groups
  • Internal roster: Update your team roster or org chart

Notify stakeholders

  • Inform the user (if appropriate) that their access has been revoked
  • Alert team members who may have been collaborating with the removed user on campaigns or audiences
  • Update documentation that referenced the removed user as a point of contact

Audit remaining users

  • If you have multiple ad accounts, verify the user was removed from all relevant accounts
  • Scan the remaining access list for other users who may need removal
  • Flag any users with Account Administrator access who no longer require it

Schedule next review

  • Add the removal to your quarterly access review log
  • Set a calendar reminder to review all X Ads users in 90 days

Troubleshooting

Cannot find the user in the access list:

  • Verify you're viewing the correct ad account (if you have multiple)
  • Confirm the user actually had access to this specific ad account
  • They may have already been removed by another Administrator

User was removed but can still access the ad account:

  • Verify the correct user was removed (check @handle carefully)
  • Confirm they don't have access through a different X account
  • Check if they have access to a different ad account with a similar name
  • Contact X Ads support if the issue persists

Need to restore a removed user:

  • Removal is permanent; you cannot restore their access
  • Re-add them through Edit access to account → Add access if needed

User was the only Account Administrator:

  • If you accidentally removed the last Administrator, contact X Ads support immediately for account recovery
  • Always verify another Administrator exists before removing an Administrator

User needs to be removed from multiple ad accounts:

  • X Ads has no MCC structure, so you must remove them from each ad account separately
  • Repeat the removal process for each ad account they had access to

Best Practices

  • Remove access on the same day as termination or contract end to reduce security risk
  • Always verify another Administrator exists before removing an Administrator
  • Screenshot before and after every removal for compliance and dispute resolution
  • Run quarterly access reviews to catch stale accounts before they become liabilities
  • Document every removal with date, reason, and approver for audit trails
  • Check all ad accounts if you have multiple - users may have access to several
  • Transfer knowledge about campaigns and audiences the user managed before removing them

Common Use Cases

Employee termination:

  1. Confirm termination date with HR
  2. Document campaigns and audiences they managed
  3. Remove the user from all X Ads accounts on their last day
  4. Notify team members who collaborated with them
  5. Update internal rosters

Agency contract ends:

  1. Confirm end date with procurement or legal team
  2. Document campaigns and strategies they managed
  3. Remove agency users within 24 hours of contract end
  4. Transfer campaign knowledge to internal team or new agency
  5. Update vendor contact list

Role change to non-digital role:

  1. Confirm the role change with the user's manager
  2. Assess if they need read-only access (Analyst) instead of full removal
  3. If no access needed, remove them; if reporting needed, change to Analyst
  4. Document the change and update internal roster

Quarterly access review cleanup:

  1. Export the access list from each ad account
  2. Cross-reference against HR roster or active employee list
  3. Identify users who left the company, changed roles, or haven't logged in for 90+ days
  4. Remove each user and document the batch cleanup
  5. Report findings to security or compliance team

Security incident:

  1. Immediately remove the user if their account shows suspicious activity
  2. Document the incident and reason for expedited removal
  3. Notify security team and include the access revocation in your incident report
  4. Monitor campaigns and audiences for unauthorized changes

User's X account deactivated:

  1. Confirm their X account is deactivated or suspended
  2. Remove them from all X Ads accounts they had access to
  3. If they plan to reactivate their X account, document the removal date and circumstances
  4. If they create a new X account, they'll need to be re-added with the new @handle
返回顶部