Facebook Messenger for Business: Roles & Permissions

Business messaging on Messenger runs through a Facebook Page, and for organizations the Page is normally owned inside a Meta Business Portfolio (widely known as Business Manager). That produces two layers of governance: the portfolio, which holds the business's assets and people, and the Page itself, which is the messaging asset.

A portfolio can be business-verified with official registration or tax documents, which unlocks higher API access and limits (Meta).

People are granted access at both layers. At the portfolio level, users are Admins (full control) or Employees (assigned assets only), with separate Finance Analyst and Finance Editor roles for billing (Meta).

At the Page level, Meta has moved from the classic named roles (Admin, Editor, Moderator, Advertiser, Analyst) to a Page access model of Full control, Partial control, and task-scoped Task access — a change rolled out across 2023–2025, so Pages may still appear in either model (Meta).

An app messages users with a Page access token issued to someone holding the Page's messaging task, and production apps must clear App Review for Advanced Access before they can message the general public.

For automated, human-less integrations, businesses issue system-user tokens scoped to specific assets, which can be revoked or refreshed, and a third-party Tech Provider may hold the app while the business retains asset ownership (Meta). An intermediary is optional — the brand can run its own app.

Verification is a separate trust layer that does not change who can administer the Page. There are three forms: Business Verification (unlocks advanced API and higher limits), the legacy notability blue badge, and paid Meta Verified for business. None of them alters the role or token model above.