Anash, i've been looking at this some more and have some follow on questions.
i'm using approach number 2 as you outlined and doing this: // Create customer. $customer = new ManagedCustomer(); $customer->name = 'Account #' . uniqid(); $customer->currencyCode = 'GBP'; $customer->dateTimeZone = 'Europe/London'; // Create operation. $operation = new ManagedCustomerOperation(); $operation->operator = 'ADD'; $operation->operand = $customer; $operations = array($operation); // Make the mutate request. $result = $managedCustomerService->mutate($operations); where i've got the managedCustomerService is retrieved using our [root] MCC client id. that brings back the new account/client id. What i'm not sure about is the next part. you said: "The client will then need to login with their MCC credentials and they will see only the accounts under their MCC." What credentials? Can i get those credentials and use them to create a link to the MCC for them? Do we need to generate OAuth2 credentials or something similar for the [new] MCC? Thanks again for the help. Martin On Thursday, September 12, 2013 10:04:17 AM UTC+1, Martin Samm wrote: > > Anash, > > thanks for that clarity. i'll progress with option 1 but might be back for > more pointers. > > Many Thanks > > Martin > > thanks for that > > On Thursday, September 12, 2013 9:03:42 AM UTC+1, Anash P. Oommen (AdWords > API Team) wrote: >> >> Hi Martin, >> >> The kind of permissions you are looking for applies only to MCC levels, >> so I can think of the following approach: >> >> 1. If your client already has an MCC, then use >> ManagedCustomerService.mutateLink to send an invite, accept it etc. so that >> the MCC becomes your child account. >> 2. If your client doesn't have an MCC account, then use >> ManagedCustomerService.mutate to create an MCC for them. >> >> Then, create the sub accounts under the client's MCC. The client will >> then need to login with their MCC credentials and they will see only the >> accounts under their MCC. >> >> To create account under the a sub mcc, you can use the OAuth2 tokens of >> your root MCC, and set clientCustomerId as the sub mcc. Similar rules work >> for retrieval as well. >> >> If you want to create all the child accounts directly under your root MCC >> itself, and then choose to show only a subset of that to a customer, then >> it cannot be done using AdWords API permissions; you need to keep track of >> the accounts and display them as required. >> >> Cheers, >> Anash P. Oommen, >> AdWords API Advisor. >> >> On Thursday, September 12, 2013 1:20:33 AM UTC+5:30, Martin Samm wrote: >>> >>> Apologies if this is a common question but i can't find an answer. >>> >>> we have an app (with an MCC 'root' account) which we'll use to manage >>> clients. We'll use the API to create sub-accounts (already tested with API) >>> but i need to limit the client's access to only there account via MCC, i.e. >>> once we create their sub-account under our root account can we set security >>> so that they can go to the MCC and see only their [sub] account? Is this >>> via OAuth 2.0 and tokens and generating a link or can we set login >>> credentials? If it's OAuth 2.0 how do we specify the relationship between >>> [our] client and the sub account we create for them? >>> >>> Can you point me in the right direction for docs, samples, explanations? >>> >>> Many Thanks >>> >>> Martin >>> >>> >>> -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog and discussion group: http://adwordsapi.blogspot.com http://groups.google.com/group/adwords-api =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
