Authentication Service Account

Instructions

To access Google Ads API (your data or someone else data) you must perform the following steps (high level). Detailed steps listed in the next sections.

1. Create a Manager account.
2. Apply for Production data access (Upgrade Developer Token access Level to Basic).
3. Link manager account with Google Ads Account.
4. Inside Manager account apply for Basic API Access level so you can use Developer Token to access Live data (Production Ads account). Without Basic access level Developer Token can be only used for Test / Sandbox Ads account.
5. Create a new Project and obtain Client Id and Client Secret

Manager Account Setup - Obtain Developer Token

To access Google Ads API (your data or someone else data) you must perform the following steps (high level). Detailed steps listed in the next sections.

1. Create a Google Ads Manager account (formally known as MCC).
2. Apply for Production data access (Upgrade Developer Token access Level to Basic).
3. Link manager account with Google Ads Account.
4. Create a new Project and obtain Service Account details

Step-1: Create a Google Ads Manager account (formally known as MCC)

Very first step to access Google Ads API for your own account or someone else account, you will need something called Google Manager Account (formally known as MCC). It will look like a Normal Google Ads Account with some difference so dont get confused if you see similar interface as Ads account.
Click here to see detailed instructions on how to create a manager account. Once you created a manager account, you can login or switch between Ads account and Manager account like below. You can identify manager account using "Manager" word next to the account id when you click Profile dropdown.

Step-2: Obtain Developer Token

Once you have created and logged in to your Google Ads Manager Account (formally known as MCC) we are ready for the next step which is obtain Developer Token. To access Google Ads API you need to pass developer token in each API call. By default Developer Token is only allowed to access Sandbox (Test) account. If you like to access Production data (Live Ads Account) then you must apply for Basic Access by clicking link under Access Level (See next section for information).
Here is how to can obtain your Developer Token.

• Log in as Manager account (Or change Top-Right Profile > Choose Manager account ID
• Click on Admin icon
• Click on API Center (This option will be missing if you are logged in to Regular Ads account as Client and not using Manager Account (MMC)
• Expand Access Level, Click Apply for Basic Access if it says "Test". By default Developer Token is created with Test Account access only. To access Production Ads account you must apply for higher access level. Must be Basic or Standard (not Test). After click the link you will see form with few questions, please fill out that and submit the form. Apploval process may take 3-5 days (or longer in some cases if you did not provide enough information).
• If your token is already approved for the basic access then copy the token and paste on the Google Ads Connector - Connection UI (For Developer Token property)

Link Manager Account to Google Ads Account

• Log in as Manager account (Or change Top-Right Profile > Choose Manager account ID
• Click on Accounts icon > Sub-account settings > Send Link Request
• Click on Add Sign (+) and select + Link existing account option
• When prompted enter Account Id(s) you like to link with this Manager Account.
• Click Send Request. You can find Ad Account Id usually at the Top-Right corner after you login to the Google Ads account.
• Now ask Google Ads Account owner to check email. Click Accept Invitation link in the email (If prompted login as Google Ads Account owner).
  -OR-
  Another way to see Invitation, Login to Google Ads account (Or Switch from the Top-Right corner by clicking Profile icon). Go to Admin icon > Access and security > Managers Tab. Find the pending invitation and click ACCEPT.
• That's it. Now your Manager account is linked to the Google Ads account

Obtain ClientId and ClientSecret

Step-1: Create project

This step is optional, if you already have a project in Google Cloud and can use it. However, if you don't, proceed with these simple steps to create one:

1. First of all, go to Google API Console.

2. Then click Select a project button and then click NEW PROJECT button:

   

3. Name your project and click CREATE button:

   

4. Wait until the project is created:

   
5. Done! Let's proceed to the next step.

Step-2: Enable Google Ads API

In this step we will enable Google Ads API:

1. Select your project on the top bar:

   

2. Then click the "hamburger" icon on the top left and access APIs & Services:

   

3. Now let's enable several APIs by clicking ENABLE APIS AND SERVICES button:

   

4. In the search bar search for ads and then locate and select Google Ads API:

   

5. Enable Google Ads API:

   
6. Done! Let's proceed to the next step.

Step-3: Create Service Account

Use the steps below to create a Service Account in Google Cloud:

1. First of all, go to IAM & Admin in Google Cloud console:

   

2. Once you do that, click Service Accounts on the left side and click CREATE SERVICE ACCOUNT button:

   

3. Then name your service account and click CREATE AND CONTINUE button:

   

4. Continue by clicking Select a role dropdown and start granting service account Project Viewer roles:

   

5. Find Project group and select Viewer role:

   

6. Finish adding roles by clicking CONTINUE button:

   
   You can always add or modify permissions later in IAM & Admin.

7. Finally, in the last step, just click button DONE:

   

8. Done! We are ready to add a Key to this service account in the next step.

Step-4: Add Key to Service Account

We are ready to add a Key (JSON or P12 key file) to the created Service Account:

1. In Service Accounts open newly created service account:

   

2. Next, copy email address of your service account for the later step:

   

3. Continue by selecting KEYS tab, then press ADD KEY dropdown, and click Create new key menu item:

   

4. Finally, select JSON (Engine v19+) or P12 option and hit CREATE button:

   
5. Key file downloads into your machine. We have all the data needed for authentication, let's proceed to the last step!

Step-5: Give Permissions to Service Account

Now it's time to grant permission to Service Account we just created:

1. Login to https://ads.google.com/aw/settings/account with Google Ads account credentials (If propmpted choose your Ads account).

2. Go to Admin section, Access and security, Click on Users tab.

3. Click on Add Icon (+) and enter service account email address which you like to use for data access and choose permissions.
4. That's it! Let's proceed to the configuration!

Step-6: Configure connection

1. Now go to SSIS package or ODBC data source and configure these fields in Service Account authentication configuration:

   • In the Service Account Email field paste the service account Email address value you copied in the previous step.
   • In the Service Account Private Key Path (i.e. *.json OR *.p12) field use downloaded key file path.
2. Done! Now you are ready to use Google Ads Connector!

Parameters