In a Google Ads My Client Center (MCC) account, what is one effective way to limit a user so that they can access only a specific subset of client accounts?

Introduction / Context:
My Client Center, now called a manager account in Google Ads, allows agencies or large advertisers to manage many accounts from a single login. Often different team members should see and control only a limited set of accounts. The question focuses on controlling access so that a particular user can work with only a specific number of accounts within the hierarchy.

Given Data / Assumptions:

• An MCC or manager account is already set up to manage multiple client accounts.
• A specific user should have access to only a subset of these client accounts.
• You want a clean and supported way to enforce this limit inside the Google Ads account structure.
• Permissions are managed through account linking and user invitations.

Concept / Approach:
Manager accounts can be nested, so you can create a hierarchy with parent and child manager accounts. A common best practice is to create a separate child manager account that links only the client accounts that a certain user or team should handle. Then you invite that user to the child manager account instead of the parent. This way, the user never sees the other accounts and has no ability to access them.

Step-by-Step Solution:
1. Recognize that user level permissions in Google Ads are granted at the account or manager account level through invitations. 2. Understand that if you invite a user directly to a high level manager account, they can potentially see all linked client accounts. 3. To restrict access, plan to group only the allowed client accounts under a separate child manager account. 4. Link the relevant client accounts to this new child manager account while leaving the others linked only to the parent. 5. Invite the user to the child manager account so that they can sign in and manage only the accounts that are linked there.

Verification / Alternative check:
This approach aligns with how large agencies structure their accounts. For example, one child manager might hold all accounts for a given region or team. Users in that region are invited only to that child manager. You can test the configuration by signing in as the limited user and verifying that only the intended accounts appear in the account picker.

Why Other Options Are Wrong:
Option b is wrong because budgets do not control access. The user would still see and could edit those accounts. Option c is incorrect since time zone settings do not restrict account visibility. Option d is also wrong because pausing campaigns does not hide the accounts and still leaves full control in the hands of the user.

Common Pitfalls:
A common mistake is to invite everyone to the top level manager account for convenience, which can leak access far beyond what is appropriate. Another pitfall is to rely on informal rules instead of permissions, which does not meet security or compliance needs. Proper use of manager hierarchies keeps account access organized and auditable.

Final Answer:
You should create a separate child MCC account, link only the required client accounts to that child MCC, and invite the user to that child manager account.