Read-only Role for Console

Give advertisers visibility without giving them control.

Overview

The Read-only role lets advertisers view campaign performance and booked campaigns in Console without being able to create, edit, or manage anything.

It helps media owners share transparent performance insights using dashboards and campaign lists, while keeping full control over campaign setup and execution.


Who It’s For

  • Advertisers – View campaign performance and delivery status without risk of making changes.
  • Media owners & publishers – Provide partner visibility while maintaining a managed-service setup.

When to Use It

Use this role when you want to:

  • Give advertisers direct access to campaign performance data.
  • Replace screenshots, spreadsheets, or manual reporting.
  • Prevent accidental edits or configuration changes.
  • Support a managed-service operating model.

How It Works

  1. An Admin invites a user with the Read-only role.

    The Invite user dialog on the Users tab. The Roles menu is open and lists Admin, User and Read only.
  2. The user logs into Console with restricted permissions.

  3. Console shows performance views only, with all configuration and actions disabled or hidden.

Read-only users can explore data via Dashboard & Campaign list, but cannot interact with campaign setup or controls.

The Console sidebar for a Read-only user. Only Dashboard and Campaigns are listed, and there is no Create button.


How to Enable It

Invite in Console

  1. Select the advertiser. Then go to Settings and open the Users tab.
  2. Click Invite user.
  3. Select Read only as the role and send the invite.
The Invite user dialog on the Users tab. The Roles menu is open and lists Admin, User and Read only.

Only Media owner or Advertiser Admin users can create or manage Read-only users. Media owner users see the Users tab only if they are organization admins, so ask an organization admin if you do not see it. For the full invitation steps, see Invite user to Console.

An admin selects the advertiser, opens Settings and the Users tab, chooses Invite, enters a name and email, picks the Read only role and sends the invite.

Once the invitation is accepted, the user appears in the user list with the Read-only role and status (Active or Invite pending).

The Users tab listing a Read only user with the status Invite pending and another user with the status Active.


What Read-only Users Can See

Dashboard

Read-only users can access the Dashboard to view aggregated performance metrics such as:

  • Impressions
  • Clicks
  • Spend
  • CTR, CPC, CPM
  • Conversions and ROAS (if available)

Campaign List

Read-only users can access the Campaign List, including:

  • Campaign name and ID
  • Status and dates
  • Channel
  • Performance metrics (impressions, clicks, CTR, spend)

Campaign actions and inline controls are disabled or hidden.

The Campaigns list for a Read-only user. The row menu is open and lists Campaign details, Campaign ads and Messages, all greyed out.


What Read-only Users Cannot Do

  • Create, edit, pause, duplicate, or delete campaigns.

  • Access campaign setup details such as:

    • Targeting
    • Bids
    • Creatives
    • Keywords
    • Audiences
  • Open campaign detail or configuration views.

  • Open Settings or Billing.

If a restricted action is attempted, Console clearly indicates that the action is not allowed.

A tooltip on a Campaign name in the Campaigns list reads: You don't have permission to view campaign details.


Notes

  • The Read-only role is strictly view-only.
  • Access is limited to Dashboard and Campaign List views.
  • All setup, configuration, and management functionality is hidden or disabled.
  • This role is designed for transparency and safety, not advanced reporting or configuration.
  • Additional reporting or export capabilities may be added in future updates.
  • Access might be extended to Ads and previews in the future iterations

Related Resources