User ACL

An access control entry for a single ad account that specifies the authenticated user’s assigned roles.

Declaration

object UserAcl

Properties

Name	Type	Description
`adAccount`	`AclAdAccount`	The ad account this ACL entry belongs to. See AclAdAccount.
`roles`	[string]	List of role names the user holds for this ad account.

Discussion

The UserAcl object represents a user’s access control entry for a single ad account. Each record returned by GET /v1/acls (Get User ACL) corresponds to one ad account the authenticated user can access.

Example

{
  "adAccount": {
    "id": 123456789,
    "name": "AwayFinder",
    "orgId": 987654321
  },
  "roles": [
    "Admin"
  ]
}

Roles Reference

An API Account Manager assigns roles through the Apple Ads UI, and you can’t set or change them via the API. Use the table below as a reference when interpreting the roles field returned by GET /v1/acls (Get User ACL).

Role	Access Level
`Admin`	Full read and write access to the ad account
`API Account Manager`	Full read and write access
`API Account Read Only`	Read-only access to all resources
`Limited Access: API Read & Write`	Read and write access to a limited resource set
`Limited Access: API Read Only`	Read-only access to a limited resource set