Why this isn't a minor detail once a team grows
With 1–2 people, everyone seeing everything doesn't hurt yet. At 5+ buyers, a "one shared login, everyone sees every account" model becomes a real risk: it's hard to tell who changed what, a buyer touches a colleague's offer by mistake, and offboarding someone means changing passwords and tokens everywhere at once.
Six roles, not just "admin and everyone else"
A sensible role model for a media-buying team separates not just "can/can't edit" but also "what they see":
- Owner — manages the plan and billing, sees everything.
- Head — manages the team, sees everything; doesn't manage the plan or billing.
- Team lead — sees their own accounts and their buyers' accounts (not the whole team's).
- Buyer — connects their own token, sees and launches only accounts assigned to them.
- Viewer — view only, no launch rights.
- Tech — technical setup for the whole team: tokens, BMs, profile proxies, pixels and pages, account assignment, trackers. Sees every account and the stats, but doesn't launch, doesn't touch budgets or pauses, doesn't manage people and doesn't see billing.
What this gets you in practice
- A buyer sees only their own accounts — can't accidentally (or intentionally) touch a colleague's campaign.
- A team lead sees their group's accounts — can help and check without entering the whole team's data.
- Offboarding someone means disabling their role, not changing passwords for the whole team: their own token simply loses its rights, and no one else's access is touched.
- The Owner is the only one who can change the plan and billing at all: a buyer who left a session open on vacation can't accidentally switch the team's plan.
Where this breaks down without separation
A shared login for the whole team is the most common anti-pattern: one password everyone knows, no way to tell from the history who actually did what, and no way to disable one person's access without touching everyone else's.