Ads Account Access Audit

2026-07-24 · Owner: matyas@clientsflow.hu · Employee reviewed: Vincze Norbert (vincze.norbert.hd@gmail.com)

At a glance

4/6
Google targets Matt admin-verified
20
Norbert change events (all routine)
0
Malicious / destructive actions found
2
Action items need Matt

Norbert is the de-facto day-to-day campaign operator across the agency's Google Ads. His activity is clean. Two actions couldn't be completed autonomously — the Norbert downgrade (needs your 2FA) and the entire Meta audit (no login available).

⛔ Needs Matt — 2 items

1. Downgrade Norbert (Google). Setting Norbert Admin → Standard triggers Google's sensitive-action re-auth that only accepts your iPhone tap-Yes or a Google Authenticator code (no backup codes; secret not on the box). Google may also require a second admin to approve — only you + Norbert are admins, so it can deadlock (the same rule also stops Norbert from removing you). Nothing was changed — the attempt was cancelled cleanly.
Fix (~5 min): MCC 517-939-0693 → Admin → Access & security → Users. If a second-admin approval is demanded, add a trusted admin you control (e.g. daniel@clientsflow.hu) first, then set Norbert to Standard (approve the 2FA on your phone). Repeat per sub-account where Norbert is a direct Admin.
2. Meta audit is blocked. The box's Chrome isn't logged into Meta and there are no Facebook/Meta credentials in credentials.md or Notion. Log Chrome into Meta Business Suite once (or share the login) and the Meta verify/restrict/activity audit can run.

1 · Access verification Matt = Admin

Agency MCC ClientsFlow Digital (517-939-0693) — Matt is a verified Admin (last login 2026-07-24), granting admin on all 7 sub-accounts.

AccountCustomer IDMatt's access
Lovasember (Csillag Sándor)881-671-8117Admin via MCC
Csupi Autómentés489-190-7898Admin direct + MCC
Fusion Tables Design Kft.293-822-3921Admin via MCC
Komplex Logopédia752-135-0935Admin direct + MCC
Acél-Karika Kft (non-target)377-724-8841Admin via MCC
Dömösi Kemping (non-target)963-421-8464Admin via MCC
JAFFA Ingatlan Kft (non-target)628-401-6278Admin via MCC
AnalitNo access found
KertújítókNo access found

⚠️ Analit & Kertújítók are not under Matt's MCC and Matt has no direct access — likely under another manager account (possibly Norbert's). No Google Ads customer ID for them is on record. Needs Matt to locate / request access.

2 · Restrict Norbert Prepared — needs your 2FA

Norbert (vincze.norbert.hd@gmail.com) is currently Admin on the MCC and on all 7 sub-accounts — today he can manage users/permissions everywhere, including your access. The goal is Admin → Standard (keeps campaign work, removes user/permission management). See the "Needs Matt" box above for why it couldn't be applied autonomously and the exact fix.

3 · Activity log — what Norbert actually did Clean

Change history per account for the accounts' full lifetime (2025-01-01 → 2026-07-24), filtered by user.

AccountNorbert eventsWhenWhat
Lovasember5Jun–Jul 2026keywords + negatives, 3 responsive search ads, 1 asset (Editor & web)
Csupi Autómentés3Jul 2026responsive search ad edits
Fusion Tables1Jul 2026single edit
Komplex Logopédia4Jul 2026ad edits, 1 campaign paused, negative keyword
Acél-Karika (non-target)3May 2025campaign build
Dömösi Kemping (non-target)4Jul 2026campaign work
JAFFA (non-target)04 changes here were by teljeskorfeluijtas@gmail.com, not Norbert
Total Norbert events: 20 · all routine

Verdict: Everything Norbert did is routine, legitimate campaign management — keywords, responsive search ads, one campaign pause. No deletions, no budget/billing tampering, no permission changes, nothing malicious. Matt made zero changes anywhere, confirming Norbert is the day-to-day operator. Low counts also reflect bulk setup via Google Ads Editor (few log entries).

Caveat: change history doesn't log every action (some access/link changes and bulk Editor uploads are under-represented); the API only covers ~30 days, so these figures come from the UI change history over each account's lifetime.

4 · Meta Ads Blocked

Targets: Lovasember, Analit, Komplex Logopédia, Fusion Tables. Chrome is not logged into Meta and no Facebook/Meta credentials are available on the box or in Notion — the Meta verify/restrict/activity audit could not start. Unblock by logging Chrome into Meta Business Suite (or sharing the login). Expect Meta to also require a 2FA confirmation for permission changes.

5 · Other flags

kai.webflow@gmail.com — Admin on Lovasember, and it invited Norbert. Unknown 3rd party (looks like a Webflow dev alias). Confirm identity & whether access is still needed.
jaffa.webflow@gmail.com & teljeskorfeluijtas@gmail.com — Admins on JAFFA (non-target); the latter is the actual operator there.
Client-owned Google accounts are Admins on their own accounts (expected): csupiautomentes@gmail.com, martahajos75@gmail.com, komplexlogopediamarketing@gmail.com, acelkarika.marketing@gmail.com, domoskemping.marketing@gmail.com.

Generated by the ads-access-audit cloud run · read-only findings + one prepared (un-applied) change