Authorize Apple Ads access
Use an Apple Account with Account Admin access or Campaign Group Manager access to each selected group. Apple handles sign-in and two-factor authentication.
- 6 steps
- English / 简体中文
- No BrightLake sign-in needed to read
If you opened this guide from a form, return to the original tab to keep your unsaved changes.
6 steps
Setup steps
Before you begin
For the person who can change settings in the named platform.
Who does what
An Apple Account Admin or Campaign Group Manager authorizes the intended groups. You or an external administrator can complete Apple's consent.
What to have ready
- Administrator access to the relevant Apple Ads account.
- The Apple accounts and groups to connect, and whether you will authorize now or delegate to an administrator.
Authorize before choosing campaign groups
You can add a connection without entering campaign group IDs. After authorization, assign the available campaign groups to each app.
Start account authorization
Add another Apple Ads account or reauthorize an existing connection. If another person manages the account, create a dedicated account administrator link instead of sharing your sign-in credentials.
Sign in on Apple's pages
Use the Apple Account that can manage access to the selected ad account. Complete two-factor authentication if prompted. Your password is not sent to this application.
Grant write access
Choose Account Name, then Read and Write for all groups, or Limited Access for selected Campaign Groups with Role → Read and Write. Read Only does not allow campaign management.
Keep each connection's intended scope
When reauthorizing, select every group to retain in that connection. Other connections are kept. Ordinary sign-in links are session-bound; only the dedicated administrator link is for sharing. Generate a new link if it expires.
Review the returned permissions
After returning, check every campaign group's ID, name and permissions. Missing groups, unknown or read-only roles, revoked access and failed checks do not establish authorized access.
Confirm completion and next steps
What to check
- Every returned campaign group has the expected ID and name.
- Each intended group has current Read & Write access, not Read Only or a revoked grant.
What happens next
For your own account, continue with the BrightLake Apple Ads user invitation and your per-app attribution choices in the original setup tab.
Tell BrightLakeMore setup guides
All guides- 5 stepsInvite BrightLake's Apple Ads userHave an Account Admin invite BrightLake's Apple Ads user for reporting and campaign support.View guide
- 3 stepsFind campaign group IDsFind and copy campaign group IDs in Apple Ads; the API calls them orgId.View guide
- 5 stepsLink App Store ConnectOn our managed account, link App Store Connect to the campaign group we create for you.View guide
