Instagram Business Messaging: Access & Permissions
TL;DR
Instagram's messaging API is open only to Professional (Business or Creator) accounts. It has no messaging role model of its own — it inherits Meta's Page and Business Portfolio structure. There are two integration paths: the established one links the account to a Facebook Page and uses its roles and a Page token; a newer 2024 path (Instagram Login) lets a Professional account be managed directly without a linked Page.
On this page
Only Professional accounts
Instagram's messaging API is only open to Professional accounts — the Business or Creator account types — never personal profiles (Meta).
An individual creates and converts to a Professional account in-app; from there, governance depends on which integration path the business uses.
Two integration paths
The established path links the Instagram Professional account to a Facebook Page and inherits that Page's roles and its Business Portfolio structure. A newer path, Instagram API with Instagram Login (introduced 2024), lets a Professional account be managed directly without a linked Page (Meta).
This 2024 change is a meaningful onboarding simplification, decoupling some setups from the old Facebook-Page requirement.
Roles are borrowed from Meta
Instagram does not publish a messaging role hierarchy of its own. In the Page-linked model, who can read and send DMs is decided by the linked Facebook Page's tasks (the messaging task) and the surrounding portfolio roles (Admin/Employee, Finance), and the person wiring up the integration needs admin-equivalent access to that Page. In the Instagram-Login model, the Professional account owner grants access directly.
So there is no Instagram-specific moderator or editor tier — governance is effectively Meta's Page/Portfolio model applied to an Instagram asset.
Who holds the API keys
Technically, the Page-linked path uses a Page access token carrying instagram_manage_messages and related permissions, while the Instagram-Login path uses an Instagram user token. Either way, an app must pass App Review for Advanced Access to message the public, and tokens can be revoked (Meta).
Verification (legacy blue badge, paid Meta Verified, or portfolio Business Verification) is a separate trust and access-unlock layer and does not itself confer administrative rights.
Frequently asked questions
Can a personal Instagram account use the messaging API?
No. Only Professional accounts — Business or Creator — can use Instagram Messaging. A personal profile must first convert to a Professional account in-app.
Do I still need a Facebook Page to message on Instagram?
Not always. The established path links a Facebook Page and uses its roles. But since 2024, the Instagram Login path lets a Professional account be managed directly without a linked Page for many cases.
What roles control Instagram DMs?
Instagram has none of its own — it borrows Meta's. In the Page-linked model, the linked Page's messaging task and the portfolio roles decide access; in the Instagram-Login model, the account owner grants it directly.
Last updated