TikTok Ads Access for Agencies: Business Center & Spark Ads Guide (2026)
Master TikTok Business Center access workflows. Learn the three permission levels, QR code authorization for Spark Ads, and how to navigate TikTok's unique 3-Business-Center limit for agency management.
The Fastest-Growing Ad Platform (With the Most Confusing Access)
TikTok reached 1 billion users faster than any social platform in history. For agencies, it represents a massive opportunity—particularly for brands targeting Gen Z and Millennials. But getting access to client TikTok ad accounts comes with unique challenges you won't find on Meta, Google, or LinkedIn.
The biggest? TikTok limits users to 3 Business Centers. If your agency already manages multiple brands, you may hit this ceiling faster than expected.
This guide covers everything you need to know about TikTok Ads access: Business Center structure, permission levels, the unique Spark Ads QR authorization flow, and common issues that trip up even experienced agencies.
TikTok Business Center: The Foundation
Unlike Meta's unlimited Business Managers or Google's unrestricted MCC accounts, TikTok enforces strict limits:
| Entity | Limit |
|---|---|
| Business Centers per user | 3 |
| Ad accounts per Business Center | 3,000 |
| Campaigns per ad account | 5,000 |
| Active campaigns at once | 1,000 |
The 3-Business-Center limit is the key constraint. An agency principal who manages personal brands, side projects, and client work can quickly max out. Plan your Business Center strategy before inviting team members.
Account Hierarchy
Business Center (max 3 per user)
|
+-- Ad Account 1
| |
+-- Ad Account 2
| |
+-- Ad Account 3
|
+-- Campaign Group (optional)
| |
+-- Campaign
| |
+-- Creatives
Business Center Setup
- Go to business.tiktok.com
- Register with email and password
- Complete email verification
- Create Business Center (name and timezone)
- The BC becomes your central hub for all advertising assets
Permission Levels: Who Can Do What
TikTok offers three main permission levels for ad accounts, plus two financial roles:
Ad Account Roles
| Role | Permissions | Best For |
|---|---|---|
| Admin | Full permissions including financial management | Campaign managers, account leads |
| Operator | Create/edit ads, no financial access | Media buyers, creative teams |
| Analyst | View reports only | Reporting analysts, clients |
Financial Roles
| Role | Permissions |
|---|---|
| Finance Manager | Full control over payment functions, card management, refunds |
| Finance Analyst | View billing invoices and transaction logs |
Business Center Roles
| Role | Permissions | Best For |
|---|---|---|
| BC Admin | Full control over BC, manage members, all accounts | Agency owners, department heads |
| BC Standard | Can only access assigned assets | Team members, specialists |
Recommendation: Grant clients Analyst access for transparency. Keep Admin and Operator roles for your team. Use Finance roles sparingly—most agencies don't need client billing access.
Two Methods for Agency Access
Method A: Request Access to Client's Ad Account
Use this when the client already has an established TikTok ad account:
- Go to Business Center → Assets → Ad Accounts
- Click "Add Ad Account"
- Select "Request Access"
- Enter Ad Account ID (find this in the client's Ads Manager)
- Choose permission level:
- Admin for full control
- Operator for campaign management only
- Analyst for read-only reporting
- Click "Send Request"
- Client receives notification in their TikTok app (Messages section)
- Client approves → Agency gains access
Method B: Partner Invitation (Client-Initiated)
Use this when the client prefers to control the invitation:
- Client goes to Business Center → Users → Partners
- Clicks "Add Partner"
- Enters your agency's Business Center ID
- Selects ad accounts to share
- Chooses permission level
- Sends invitation
- Agency accepts in their Business Center
- Access is linked across both Business Centers
Key advantage of Method B: TikTok allows ad accounts to be linked to multiple Business Centers. This means clients don't have to choose between agencies—they can grant access to multiple partners simultaneously.
Spark Ads: The QR Code Authorization Flow
Spark Ads let agencies boost organic TikTok content as ads. This requires a separate authorization flow that's unique to TikTok: QR code scanning.
How It Works
- BC Admin goes to Assets → TikTok Accounts
- Clicks "Request Access"
- Selects permission scopes:
- Access profile information
- Access live videos
- Use posts for ads
- Access public videos
- System generates a QR code
- TikTok account owner scans QR code with their phone
- Authorization completes → Agency can now boost content
Why This Matters
Unlike Meta's Page access (granted through Business Manager) or YouTube's channel permissions, TikTok requires the actual creator to physically scan a QR code. This means:
- You can't complete this remotely without the creator present
- The creator must have their phone with the TikTok app
- Screen sharing doesn't work—needs to be in-person or coordinated live
Pro tip: Schedule a 5-minute video call with the creator to complete this step. Have them ready with TikTok open while you generate the QR code.
Common Issues & Solutions
Issue 1: "Account Already Linked to Another Business Center"
Cause: The ad account is already associated with a different Business Center.
Solution: Unlike some platforms, TikTok allows multiple Business Center links. Have the client:
- Go to their Business Center → Assets → Ad Accounts
- Select the account
- Click "Link to Business Center"
- Enter your agency's BC ID
Issue 2: "Access Request Not Received"
Cause: Requests appear in TikTok app notifications, not email.
Solution:
- Have client open TikTok app
- Go to Profile → Menu (three lines) → Messages
- Look for "Business Center" notifications
- Also verify the email address matches their TikTok for Business account
Issue 3: Wrong Permission Level Granted
Cause: Client selected wrong role during approval.
Solution:
- Go to Business Center → Users → Ad Accounts
- Select the user
- Click pencil icon
- Change role
- Save changes (takes effect immediately)
Issue 4: Attribution Settings Are View-Only
Cause: As of January 1, 2024, TikTok made attribution parameters view-only for agencies.
Impact: Agencies can see attribution settings but cannot modify:
- Attribution windows
- View-through settings
- Click-through settings
Solution: For full attribution control, clients must configure settings in their own Ads Manager. Provide them with written instructions for the specific changes needed.
Issue 5: Sandbox Account Spending Limits
Cause: Testing with a Sandbox account (limited to $500/day).
Solution:
- Use Sandbox for testing campaign structures and creative workflows
- For production traffic, switch to a Standard account
- Standard accounts require business license verification (1-3 day review)
Issue 6: Business Center Limit Reached
Cause: User already has 3 Business Centers.
Solutions:
- Archive unused Business Centers (Settings → Business Info → Archive)
- Use team member accounts strategically (each person can have 3 BCs)
- Consolidate multiple small clients into one BC (less ideal for separation)
TikTok vs. Meta vs. Google vs. LinkedIn
| Feature | TikTok | Meta | ||
|---|---|---|---|---|
| Business Center | Yes (max 3) | Yes (unlimited) | MCC (unlimited) | Campaign Manager |
| Permission Levels | 3 (Admin, Operator, Analyst) | 4 levels | 4 levels | 5 levels |
| Spark Ads | QR code authorization | N/A | N/A | N/A |
| Agency Attribution | View-only (2024+) | Full control | Full control | Full control |
| Multi-BC Linking | Yes | Yes | No | No |
| Unique Constraint | 3 BC limit per user | None | None | Connection required |
Security Best Practices
1. Never Share Login Credentials
TikTok Business Center is designed for team access. Sharing passwords:
- Breaks audit trails
- Creates security vulnerabilities
- Violates TikTok's terms
2. Enable Two-Factor Authentication
Required for all Business Center admins. Make it standard for all team members.
3. Audit Access Regularly
Quarterly review:
- Who has access to which accounts
- Whether permission levels are still appropriate
- Former team members or clients who should be removed
4. Remove Access Promptly
When clients churn or team members leave:
- Remove their access within 24 hours
- Document the removal in your records
- Verify they no longer appear in any Business Center
5. Use Dedicated Agency Emails
Create separate TikTok accounts for team members using their agency email. This:
- Maintains professional boundaries
- Simplifies offboarding
- Keeps client access separate from personal accounts
6. Monitor Connected Business Centers
TikTok shows which Business Centers are linked to each ad account. Periodically verify only authorized partners have access.
Pro Tips for Agency Teams
Structure Your Business Centers Strategically
With the 3-BC limit, consider:
- BC 1: Active clients (primary revenue)
- BC 2: Prospects and testing
- BC 3: Internal projects or overflow
Use Campaign Groups for Client Organization
Campaign groups help organize large accounts:
- Group by product line, season, or objective
- Set group-level budgets
- Simplify reporting and management
Prepare Clients for Spark Ads Authorization
Before scheduling that QR code call:
- Send a brief explanation of what Spark Ads are
- Confirm the creator has the TikTok app installed
- Schedule for when they'll have 5 minutes of focus time
- Have a backup plan if they can't complete it live
Document Everything
TikTok's interface changes frequently. Document:
- Which permission levels each client granted
- Who approved access and when
- Any special configurations or workarounds
The Alternative: Streamline with AuthHub
Managing TikTok access—along with Meta, Google, LinkedIn, Pinterest, and every other platform—quickly becomes an operational burden. Each platform has different:
- Permission systems
- Authorization workflows
- Notification methods
- Token refresh requirements
AuthHub consolidates everything into a single workflow:
- Create an access request in AuthHub (select TikTok + any other platforms)
- Send one link to your client
- Client authorizes each platform through guided OAuth flows
- Tokens are stored securely and refreshed automatically
- Audit logging tracks every access for compliance
No more chasing clients through different interfaces. No more explaining Business Center vs. ad account. No more manual token management.
Transform your client onboarding: