Google has introduced an extra security step for Google Ads accounts. Adding a new user with Admin access now requires a second admin on the account to approve the request before the invitation is sent. This guide walks through the full process from both sides, using example account details.
Overview of the process
- An existing admin requests to add the new user
- Another admin on the account reviews and approves the request
- Google sends the invitation to the new user
- The new user accepts the invitation
- Access is confirmed and visible in Access and security
Note: the approval must come from a different admin than the one who made the request. You cannot approve your own request. If your account only has one admin, plan ahead. You may need to add a second admin first or contact Google Ads support.
Step 1: Request to add the new user
The existing admin goes to Admin > Access and security > Users in Google Ads and adds the new user’s email address with the desired access level.
Instead of sending the invitation immediately, Google now logs this as a User update request. It appears at the top of the Access and security page with a status of Pending admin review, showing the requestor, the request type, the user being added, the access level, and the date requested.
Step 2: Another admin reviews the request
Google emails the other admins on the account with the subject line [Action required] Review security request. The email explains that an admin has requested a sensitive change on the account and includes a Review request button. The reviewing admin clicks through, signs in, and approves or rejects the request from within the account.
Important: the request has an expiry date, typically around three weeks from the date it was made. If nobody approves it in time, the request lapses and needs to be submitted again.
Step 3: Approval confirmation
Once approved, the original requestor receives an email titled Your security request was approved. This confirms another admin has approved the request and notes that if the request was for a new user, that person must now accept the email invitation before they get access.
A notification also arrives summarising the approval:
Step 4: The new user accepts the invitation
The new user receives an email inviting them to access the Google Ads account. It shows the account name, the customer ID, and the access level being granted. They click Accept invitation and complete the sign-in steps on the next page. They must accept using the same email address the invitation was sent to.
Step 5: Access is confirmed
Once accepted, the account owner receives a confirmation email titled New (Administrative) user has been added to your Google Ads account, listing the new user’s email and access level. The new user now appears in the Users table under Access and security.
If you don’t recognise a new user
If a confirmation email arrives for a user you don’t recognise, remove them immediately from the Access and security page. You need administrative access to do this. Each user row has a Remove access action.
Quick tips
- Always have at least two admins on the account so approvals don’t get stuck
- Check the request expiry date and follow up with the approving admin promptly
- Business email addresses are preferred; Google flags non-business (personal) email users on the account summary
- Keep 2-step verification enabled for all users