Connecting Ad Platform Accounts

​

Overview

Some storefronts run through direct ad platform adapters instead of a publisher sales agent. Before Scope3 can discover products, create media buys, sync creatives, or read delivery from those adapters, the customer must connect the relevant advertiser account to Scope3 through the platform’s own account-sharing or OAuth flow. This guide is written for legal, procurement, and platform admins who need to approve the access request.

​

What Write Access Means

When Scope3 asks for platform write access, it is asking for permission to operate campaigns and related advertising objects for the advertiser accounts that the customer explicitly grants. It does not mean Scope3 needs broad business administration rights. Write access may be used to:

• Create, update, pause, or resume campaign objects, ad groups or ad sets, ads, budgets, targeting, and flight dates.
• Upload or sync creative assets and create platform-native creative records.
• Create or update first-party audience segments when the customer enables audience sync.
• Create or update product catalogs or feeds when the media-buy workflow uses catalog products.
• Read delivery, spend, approval status, pacing, and performance reporting.
• Send conversion or event data when measurement is configured for the advertiser.
• List connected advertiser accounts so the customer can choose the right one.

Scope3 does not need permission to:

• Add, edit, or delete users.
• Take ownership of the customer’s business account or advertiser account.
• Manage unrelated advertiser accounts that were not shared with Scope3.
• Change security settings, login settings, business verification, or platform account ownership.
• Manage billing users or finance roles unless a customer has a separate, explicitly approved billing workflow.

​

Recommended Access Pattern

Use the platform’s partner or manager-account sharing flow where available. The customer remains the owner of the business and advertiser accounts, and can remove or reduce Scope3’s access from the platform console at any time. For activation workflows, choose the least broad role that can both manage ads and read reporting. Use read-only access only for reporting-only pilots.

​

Platform Summary

​

Meta

Ask the customer to add Scope3 as a partner in Meta Business Suite or Meta Business Manager, then grant access only to the advertiser assets required for the workflow. Default grant for activation:

• The relevant ad account.
• Campaign management access.
• Performance reporting access.

Additional assets may be needed depending on the campaign:

• Facebook Page or Instagram account access when ads use those identities.
• Pixel or dataset access when conversion events or conversion optimization are configured.
• Catalog access when catalog products are used.

Meta’s OAuth consent can include ads_management, ads_read, and business_management. The customer-side asset grant should still stay scoped to the specific business assets needed for the advertiser workflow. Scope3 does not need full control of the customer’s business portfolio, broad account-settings control, billing administration, or permission to add, edit, or delete users.

​

TikTok

Ask the customer to share the advertiser account from TikTok Business Center to Scope3’s Business Center as a partner. Default grant for activation:

• Advertiser account role: Operator.

Use Analyst only for reporting-only access. Analyst can view ads, performance, and reports, but it cannot create or edit ads or manage audiences. Use Admin only when there is an explicitly approved reason to manage ad account settings. Admin is not the default activation role. Additional assets may be needed depending on the campaign:

• TikTok account delivery access for Spark Ads.
• Use “Only show as ads” when Scope3 should be able to run Spark Ads without publishing posts to the TikTok profile.
• Use “Show on TikTok profile and as ads” only when organic profile publishing is explicitly intended.

Scope3 does not need Business Center Admin, finance roles, or permission to add, edit, or delete users.

​

Google Ads

Ask the customer to grant Scope3 manager-account or account-level access to the Google Ads account that will run the campaign. Default grant for activation:

• Campaign management access.
• Reporting access.

Additional access may be needed depending on the workflow:

• Customer data or data-manager permissions when first-party audiences, enhanced conversions, or similar measurement workflows are enabled.
• Conversion action access when Scope3 is expected to configure or send conversion events.

Scope3 does not need Google Ads account ownership, billing administration, or permission to add, edit, or delete users.

​

Snap

Ask the customer to connect the relevant Snap advertiser account through OAuth or the approved Snap account-sharing flow. Default grant for activation:

• Ads management access.
• Reporting access.

Additional access may be needed for profile-backed creative workflows or measurement. Scope3’s Snap adapter requests Snap Marketing API access and may also request profile API access when the connected workflow needs it. Scope3 does not need organization administration, billing administration, or permission to add, edit, or delete users.

​

LinkedIn

Ask the customer to connect the LinkedIn ad account that will run the campaign. Default grant for activation:

• Ads read access.
• Ads write access.
• Ads reporting access.

Additional access may be needed when creatives or sponsored content require an organization identity. Scope3 does not need Company Page administration unless the agreed workflow includes organic or organization-social publishing. Scope3 does not need LinkedIn account ownership, billing administration, or permission to add, edit, or delete users.

​

Pinterest

Ask the customer to connect the Pinterest ad account that will run the campaign. Default grant for activation:

• Ads read access.
• Ads write access.

Additional pin read/write access may be requested when the campaign workflow uses Pinterest-native creative or pin objects. Scope3 does not need account ownership, billing administration, or permission to add, edit, or delete users.

​

Reddit

Ask the customer to connect the Reddit Ads account or profile that will run the campaign. Default grant for activation:

• Ads read access.
• Ads edit access.

Additional conversion permissions may be requested when the customer enables conversion tracking or event logging. Scope3 does not need Reddit account ownership, profile administration beyond the advertising workflow, or permission to add, edit, or delete users.

​

Amazon Ads

Ask the customer to connect the Amazon Ads account that will run the campaign. Default grant for activation:

• Advertising campaign-management access.
• Reporting access.

Amazon retail, seller, or vendor account administration is separate from advertising campaign management. Scope3 does not need retail account ownership, billing administration, or permission to add, edit, or delete users.

​

Revoking Access

Customers can revoke Scope3’s access from the platform’s business, partner, manager-account, or OAuth settings. Revoking access stops future discovery, campaign changes, creative sync, audience sync, catalog sync, reporting reads, and measurement writes for that connected platform account. After revocation, refresh the connection in Interchange before running new discovery or media-buy workflows so the account status reflects the provider’s current authorization state.