Google Ads adds a second set of eyes for high-risk account changes

Google Ads has quietly rolled out multi-party approval, a security feature that requires a second administrator to approve certain high-risk account actions. These include adding or removing users and changing user roles.

Why we care. As ad accounts grow larger — and more valuable — access control has become a bigger risk. A single unauthorized, malicious or accidental account change can disrupt campaigns, access, and billing in minutes. Multi-party approval reduces that risk by requiring a second admin sign-off on high-impact actions, adding protection without changing day-to-day campaign management.

For agencies and large teams especially, it helps prevent costly mistakes and improves overall account security.

How it works. When an admin initiates a sensitive change, Google Ads automatically creates an approval request. Other eligible admins receive an in-product notification, and one of them must approve or deny the request within 20 days. If no action is taken, the request expires and the change is blocked.

Status tracking. Each request is clearly labeled as Complete, Denied, or Expired, making it easier for teams to monitor what’s been approved — and what didn’t make it through.

Where to find it. Admins can view and manage approval requests from the Access and security section within the Admin menu.

The bigger picture. The update reflects growing concern around account security, especially for agencies and large advertisers managing multiple users, partners, and permissions. With advertisers recently reporting costly hacks, this would be a very welcome update.

Bottom line. Multi-party approval adds friction — but the good kind. It gives advertisers more control over who can make critical changes and helps protect Google Ads accounts from unauthorized access.