How to Grant Access to Business Manager: Roles and Levels

• Home | FAQ about Facebook Ads Arbitrage | How to give access to Business Manager: roles and levels

Access to Business Manager should not be given “just in case”. It should match a real task. One person may only need to view reports, another may need to manage ads, someone else may work with a Page, while the business owner should keep control over the whole portfolio.

The biggest mistake is giving full control to someone who only needs one ad account or one Page. In Meta Business Suite, access works in layers: first, a person or partner gets access to the business portfolio, and then specific assets and permissions are assigned.

First, decide who needs access

There are two common scenarios in Business Manager. The first one is adding a specific person: a media buyer, employee, accountant, content manager or project owner. The second one is giving access to a partner, such as an agency or another company with its own business portfolio.

For an internal employee, adding a person through the users section usually makes sense. For an agency, partner access is often cleaner: you do not add every agency employee one by one, but share the required assets with the partner business.

Full control and partial access

The most important difference is full control versus partial access. Full control should be given only to people who actually manage the business portfolio: the owner, main admin or the person responsible for access, settings, security and key decisions.

Partial access is enough for most everyday tasks. A person can receive only the assets they need: an ad account, Page, Instagram account, pixel, dataset, catalogue or another business asset. This reduces the risk of accidental changes and prevents unnecessary access to sensitive information.

Which permissions fit different tasks

Do not start with the question “should this person be an admin?”. A better question is: what exactly should this person do inside the BM?

• A media buyer usually needs access to an ad account, Page, pixel or dataset, and sometimes an Instagram account.
• A content manager often needs Page and publishing access, without payment or business settings permissions.
• An analyst may only need access to statistics and events, without the ability to change ads or users.
• An accountant may need billing or invoice-related access, but not campaign management.
• The business owner needs full control because they must be able to restore order in access settings.

This approach is simpler and safer: each person gets the exact set of permissions needed for their role, not everything at once.

How to give access to a person

1. Open Meta Business Suite or business portfolio settings.
2. Go to the people or users section.
3. Choose the option to add a new person.
4. Enter the email address where the invitation should be sent.
5. Select the access level: full control or partial access.
6. Assign specific assets: Page, ad account, pixel, catalogue, Instagram account or other assets.
7. Review the permissions before sending the invitation.
8. Send the invite and wait for the person to accept it.

After the invitation is accepted, open the user list again and check what permissions were actually applied. Sometimes a person is added to the business portfolio but cannot see the needed ad account because no specific asset was assigned.

How to give access to a partner or agency

If you work with an agency, contractor or another business, partner access may be more convenient. In this case, you add the partner’s business portfolio and choose which assets they can access.

A partner does not always need full control. In most cases, it is enough to assign the required ad accounts, Pages, pixels or catalogues. The partner then manages its own team inside its own structure.

This is useful when you do not want dozens of external employees inside your BM. Still, it is important to check which assets were shared and whether you can quickly remove access when the cooperation ends.

What to check before giving access

• Whether you understand why the person needs access.
• Whether partial access is enough instead of full control.
• Whether only the necessary assets are selected, not the entire portfolio.
• Whether access to payments is really needed or creates extra risk.
• Whether two-factor authentication is enabled for admins.
• Whether it is clear who can add other people and change roles.

If Business Manager is used as working infrastructure, clean permissions matter as much as the ad accounts themselves. In the Facebook Business Manager category, it is worth looking not only at limits and assets, but also at how clearly access is structured and who controls the portfolio.

How to remove or change access

Access should be reviewed from time to time. This is especially important after a contractor finishes work, a media buyer changes, an employee leaves or the project moves to another team.

1. Open business portfolio settings.
2. Go to the people or partners section.
3. Select the person or partner you need.
4. Review which assets and permissions are assigned.
5. Change permissions or remove access completely.

Removing a user from the business portfolio should not delete your Pages, ad accounts or pixels. It removes that person’s or partner’s access to your assets. Still, before removing someone, check whether the team temporarily depends on their role for management.

Common mistakes with Business Manager roles

The first mistake is giving full control to too many people. The second is forgetting to remove old contractors. The third is adding people informally without defining what they are responsible for. The fourth is giving payment access to people who do not need it.

Another common issue is confusing portfolio access with asset access. A person may be added to the BM but still not see an ad account. Or they may see a Page but not have permission to run ads. That is why access should be checked by specific assets, not only by the person’s name in the user list.

How not to lose control over the BM

A business portfolio should always have a clear owner and at least one trusted person with full control. But full rights should not be given to the whole team. The more people have maximum permissions, the higher the risk of accidental changes, conflicts and security issues.

A healthy approach is to give the minimum permissions needed, enable two-factor authentication, review access after every project and avoid keeping people inside the BM “just in case”. This is not bureaucracy. It is normal hygiene for advertising infrastructure.

Business Manager access is not just a technical “add person” button. It is a distribution of responsibility. The more accurately you assign roles and permission levels, the easier it is to understand who is responsible for what and the lower the risk of losing control over the business portfolio.