Hi Martin, The kind of permissions you are looking for applies only to MCC levels, so I can think of the following approach:
1. If your client already has an MCC, then use ManagedCustomerService.mutateLink to send an invite, accept it etc. so that the MCC becomes your child account. 2. If your client doesn't have an MCC account, then use ManagedCustomerService.mutate to create an MCC for them. Then, create the sub accounts under the client's MCC. The client will then need to login with their MCC credentials and they will see only the accounts under their MCC. To create account under the a sub mcc, you can use the OAuth2 tokens of your root MCC, and set clientCustomerId as the sub mcc. Similar rules work for retrieval as well. If you want to create all the child accounts directly under your root MCC itself, and then choose to show only a subset of that to a customer, then it cannot be done using AdWords API permissions; you need to keep track of the accounts and display them as required. Cheers, Anash P. Oommen, AdWords API Advisor. On Thursday, September 12, 2013 1:20:33 AM UTC+5:30, Martin Samm wrote: > > Apologies if this is a common question but i can't find an answer. > > we have an app (with an MCC 'root' account) which we'll use to manage > clients. We'll use the API to create sub-accounts (already tested with API) > but i need to limit the client's access to only there account via MCC, i.e. > once we create their sub-account under our root account can we set security > so that they can go to the MCC and see only their [sub] account? Is this > via OAuth 2.0 and tokens and generating a link or can we set login > credentials? If it's OAuth 2.0 how do we specify the relationship between > [our] client and the sub account we create for them? > > Can you point me in the right direction for docs, samples, explanations? > > Many Thanks > > Martin > > > -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog and discussion group: http://adwordsapi.blogspot.com http://groups.google.com/group/adwords-api =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
