Google Ads tightens access control with multi-party authorization

Google Ads has introduced multi-party authorization, a security feature that requires a second administrator to approve high-risk account actions. These actions include adding or removing users and changing user roles.
Why do we care. As ad accounts grow in size and value, controlling access becomes a greater risk. A single unauthorized, malicious, or accidental change can disrupt campaigns, permissions, or billing minutes. Multi-party authorization reduces that risk by requiring a second administrator to approve high-impact actions. It adds strong security without reducing daily functionality. For agencies and large teams, it prevents costly mistakes and greatly improves account security.
How does this work. When an administrator initiates a critical change, Google Ads automatically creates an approval request. Other eligible administrators receive an in-product notification. One of them must approve or deny the request within 20 days. If no one responds, the request expires, and the transition is blocked.
Status tracking. Each request is clearly marked as Completed, Denied, or Expired. This makes it easy to see what was approved and what was not.
Where can you find it. You can view and manage authorization requests at Access and security within the Admin menu.
Big picture. The update reflects growing concerns about account security, especially for agencies and large advertisers who manage multiple users, partners, and permissions. Since marketers have recently reported expensive hacks, this is a welcome update.
Google ads help document. About multi-party approval of Google ads
Search Engine Land is owned by Semrush. We are committed to providing the highest quality of marketing articles. Unless otherwise stated, the content of this page is written by an employee or paid contractor of Semrush Inc.


