Hi, We with Assaf are co-workers (well, he is my manager), I think you didn't understand the question correctly (or we don't understand the answer).
In genera, our company provides services to AdWords users via API. Before a customer can start working we ask him to grant us a refresh token (via the OAuth mechanism). We have a developer token with Standard access, created an application in the developers console and use the Secret of this application to get the refresh token. The scopes we ask for are https://www.googleapis.com/auth/adwords and https://www.googleapis.com/auth/analytics.readonly. As the result when granting the access our customers see the following messages: XYZ wants to - View your Google Analytics data - Manage your AdWords campaigns So far so good. Recently we've developed a report generating tool, for this we only need to read data, without any modification operations. Customers don't trust a product that suggests an analyzing tool, but requests managing permissions. We would like to change the message from "Manage your AdWords campaigns" to "View your AdWords campaigns". In Analytics, for example, this can easily be achieved by using https://www.googleapis.com/auth/analytics.readonly instead of https://www.googleapis.com/auth/analytics, but a scope https://www.googleapis.com/auth/adwords,readonly doesn't exist. We Googled it and the only solution that was mentioned is issuing a new developer token with Read-only access level for another Manager. This is a kind of headache (approvals, reviews, regulations etc) and all this just to "downgrade" the approved access level. What is the best possible way to achieve the goal? Thanks On Tuesday, September 12, 2017 at 11:57:40 PM UTC+3, Bharani Cherukuri (AdWords API Team) wrote: > > Hello Assaf, > > Access levels such as Read-only, Standard and Administrative access are > associated with the email address to make the API requests. It does not > depend on the developer token access. AdWords API access level depends on > the level of access given to the account in the UI. You will be able to set > the access level while adding a new user and they will have the same access > in the API. You can check the access level associated with the email > address by logging into the AdWords account > Account Settings > Account > access. > > If you have authenticated as read-only client, you will only be able to > make GET calls to download the reports. Email-only accounts cannot make > AdWords API calls at all. You can also refer to this document > <https://support.google.com/adwords/answer/1704346> on how to set the > access levels on your AdWords account for additional guidance. In this > case, it is not required to request a second Developer token. You will only > need to manage access levels > <https://support.google.com/adwords/answer/6139186?rd=1#invite> depending > on the level of access to be granted for your Manager account. Let me know > if you have any other questions. > > Thanks, > Bharani Cherukuri > AdWords API Team > > On Tuesday, September 12, 2017 at 11:43:56 AM UTC-4, Assaf Frank wrote: >> >> Hi, >> >> We currently have a standard token (read/write) but would like to offer a >> service to customers that only requires read access. >> We would like to display the "grant access" message to the users that we >> would like access to "read" only and not to fully manage their accounts (I >> understand this message is according to the token access). >> >> Is there a way to as for ready only access from the user - even if the >> token has full read/write access? >> If not, can we under the same Manager ID get a second token with only >> read access for this purpose? >> >> Thanks, >> >> Assaf >> > -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog and Google+: https://googleadsdeveloper.blogspot.com/ https://plus.google.com/+GoogleAdsDevelopers/posts =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. Visit this group at https://groups.google.com/group/adwords-api. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/67dea167-8569-4f2d-b39f-64b1d30f57e8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
