On July 14, 2026, within a ten minute window, three separate changes surfaced in how Google Ads governs who can touch an advertising account and what can be advertised on it. The most urgent one for any agency or business: removing a user's access now requires a written justification and approval from a second administrator, and if your account only has one administrator, there is no documented mechanism telling you what happens when you need to approve your own request. The other two are policy changes confirmed directly by Google: alcohol advertising expands to 29 more countries on July 28, and gambling certification requirements expand to every category on September 14.
None of the three, taken alone, looks like major news. Together, they describe something more significant: Google is starting to treat access to an advertising account with the same rigor that regulated industries apply to privileged access on critical systems. This article explains exactly what changed, what is officially confirmed versus what is still only reported by trade press, and what you should review in your accounts before any of these changes catches you off guard.
What changed in Google Ads account access control in July 2026?
Since mid July 2026, when a user requests removal of another person's access within a Google Ads account, the platform asks for a written justification and routes that request to a second administrator for approval, including the justification text so the approver can read it. The change was first spotted through a screenshot shared by a PPC professional, and trade press coverage picked it up from there.
According to that coverage, the mechanism captures the name of the user who would lose access, the specific account involved, that person's current access level, and a free text justification field. It is also reported that removal requests expire after 20 days if no second administrator approves them, though that specific window does not yet appear in any official Google documentation.
The logic behind the change makes sense: many account takeovers begin with an attacker quietly removing legitimate users, and a two person rule on removals closes that door. The problem is not the intent behind the change, it is who gets locked out.
What happens if your account only has one administrator?
If your Google Ads account has a single administrator, there is, as of July 2026, no documented fallback mechanism, appeals process, or emergency access path for when that sole administrator needs to approve their own access change request. It is an obvious design gap: an approval gate that requires a second administrator assumes that second administrator exists, and a large number of small business and single owner accounts simply do not have one.
This is not the first time this exact gap has appeared. On May 7, 2026, a PPC professional had already documented an almost identical approval gate, this time for access level changes, such as promoting a user from read only to administrator, with the same unanswered question: what does a sole administrator do when they need to add a second one. Two appearances of the same problem, on two different surfaces of the permissions system, two months apart, suggest a structural gap rather than an isolated bug.
This section holds up on its own: if you manage a Google Ads account as its sole administrator, the practical takeaway does not depend on the rest of the article. Add a trusted second administrator now, while you can still do it without friction, instead of discovering the missing fallback the day you actually need to remove or change someone's access.
What is confirmed by Google, and what is only reported?
Of the three changes, only two are confirmed directly on Google's official policy pages: the geographic expansion of the alcohol policy and the expansion of gambling certification. The approval gate for access removal is known only through user screenshots and trade press coverage, without Google having published official documentation on it as of this writing.
This distinction matters because it determines how firm your internal process can be. On what Google has officially confirmed, you can build a rigid process around real deadlines. On what is only reported (the exact mechanics of the removal gate and the 20 day expiration window), the prudent move is to prepare as if the reports are accurate, without treating them as a guaranteed fact. The cost of proactively adding a second administrator is minimal compared to the cost of getting locked out if the reporting turns out to be correct.
Barry Schwartz, Executive Editor at Search Engine Roundtable, who covered the original finding, summed it up by noting that the feature makes sense precisely for the case where someone accidentally removes access from a person who should have kept it. That is a reasonable observation, but it does not change the fact that, until Google publishes an official guide, any specific detail of the mechanism should be treated as likely, not confirmed.
What does the July 28 alcohol policy expansion mean?
Starting July 28, 2026, Google Ads expands the approved geographic locations for the sale and informational promotion of alcoholic beverages to 29 additional countries, from Botswana to Zimbabwe, spanning Africa, Europe, Asia, and the Americas. Three of those markets carry specific alcohol by volume limits: Ecuador allows ads only for beverages under 5% ABV, Iceland under 2.25%, and Vietnam under 5.5%. Beverages at 0% ABV are permitted in every new location without exception.
For an account already operating across multiple markets, the practical work before July 28 is reviewing geo targeting and creative assets, deciding which of the 29 markets are commercially relevant, and confirming that the product catalog respects the ABV ceiling in each country where one applies. A beer brand can bring its full lineup into South Korea or Brazil, but needs to filter its catalog down to low or non alcoholic versions before advertising in Iceland, where the limit sits stricter than most conventional beers.
What does the September 14 gambling certification expansion mean?
Starting September 14, 2026, the certification requirement Google introduced in March 2026 for a subset of gambling and games categories expands to every category under that policy, with no exceptions. Any account seeking to advertise in any gambling and games category will need to demonstrate good policy standing to qualify, including categories that never previously required a certificate.
The enforcement mechanism reaches beyond the individual account: manager accounts with repeated revocations of online gambling certificates, or accounts under MCC management repeatedly flagged for gambling violations while holding a certificate, lose the ability to apply for new certificates, and can even have existing certifications revoked. For an agency managing several accounts under a shared manager structure, this flips the usual risk model: a single neglected client account under your MCC can contaminate certification eligibility across your entire portfolio.
What should you review in your accounts now?
The first step, regardless of whether you manage your own accounts or client accounts, is to audit the administrator list on every Google Ads account under your management, and add a trusted second administrator to any account that currently depends on a single person. This is worth doing this week, before you need to remove or change an access and discover the gap at the worst possible moment.
If you manage client accounts as an agency, formalize your team's role as a backup administrator in writing within the service agreement with each client. That turns the new second administrator requirement from a potential lockout risk into a continuity guarantee you can point to concretely with your client. If you work with either of the two sectors affected by the confirmed policy changes (alcohol or gambling), schedule the targeting and certification review with the July 28 and September 14 dates marked explicitly on your calendar, not as a vague note to review policies someday.
To size this with an illustrative example, not a real audit but a typical scenario, imagine an agency managing twenty client accounts, where eight have a single registered administrator, all of them the original business owner who set up the account years ago and no longer actively participates in marketing decisions. A quick administrator roster audit, done in one afternoon, identifies those eight accounts and adds the agency as a formal second administrator on each one, closing the risk of getting locked out if they ever need to remove or change an access, in a single move.
We already covered what you should expect from a Google Ads agency and how to choose one well, and account access governance is exactly the kind of practice that separates an agency that only manages budget from one that manages the full account with judgment. If you are also interested in the other recent platform change, we already documented the bidding adjustment arriving on August 17, 2026, which, together with this update, confirms the same underlying direction: Google is formalizing more and more layers of control over how an advertising account is operated.
At JP Director, we treat administrator audits as a standard part of any account we manage, not as a reactive task handled after a problem occurs. We document who has access, at what level, and make sure no client account depends on a single person to operate safely.
Frequently Asked Questions
Do I need to do anything if my Google Ads account already has two or more administrators?
Not urgently. If your account already has at least two active administrators, the new approval gate for access removal simply adds an extra review step, without structurally blocking you. The real risk from this change concentrates on accounts with a single administrator, where, as of July 2026, no documented fallback mechanism exists.
Is this account access change already officially confirmed by Google?
Not entirely. The existence of the justification and second administrator approval gate is known through user screenshots and trade press coverage, not through official Google documentation published to date. In contrast, the July 28 alcohol policy expansion and the September 14 gambling certification expansion are confirmed directly on Google Ads policy pages.
Which countries are added to Google Ads' alcohol policy on July 28, 2026?
Twenty nine countries are added, including Botswana, Brazil, Croatia, Ecuador, Finland, Iceland, Ivory Coast, Jamaica, Kenya, Serbia, South Korea, Vietnam, and Zimbabwe, among others. Three of those markets carry specific alcohol by volume limits: Ecuador under 5%, Iceland under 2.25%, and Vietnam under 5.5%. Beverages at 0% ABV are permitted in every new location with no additional restriction.
What happens to my gambling certification if I manage several accounts under one MCC?
Starting September 14, 2026, every gambling and games category requires certification, and manager accounts with repeated certificate revocations, or linked to managed accounts repeatedly flagged for violations, lose the ability to request new certificates across the entire structure, not just for the individual account with the problem. This means the policy standing of each client account under your MCC directly affects the certification eligibility of the others.
Last updated: July 2026. These governance and policy changes continue to evolve; verify the most current status directly on Google Ads' advertising policy pages and Help Center before making decisions about access to your accounts.
