Telegram Business Accounts: Bots, Roles & Permissions
TL;DR
Telegram has two very different business models. A BotFather bot has no company account and no verification to exist — control is defined entirely by the bot token, and whoever holds it has full control. Telegram Business is a feature set on a personal account (for Telegram Premium subscribers) that can connect one external bot, granting it a fine-grained, per-chat set of fourteen rights the owner can revoke at any time. There is no organizational role hierarchy in the corporate sense.
On this page
Two governance models
Telegram offers two fundamentally different ways for a business to operate, with different control models.
- Bot API bots — created by any Telegram user through @BotFather, which issues a bot token. There is no business-account object and no legal-entity verification.
- Telegram Business — a set of features on a personal account, available to Telegram Premium subscribers. It is not a separate account class; the human account owner remains the principal.
The two are often combined: a business connects a bot to a Telegram Business account so the bot can reply on the owner's behalf.
Bots: the token is the control
A bot has no roles and no verification requirement to exist — any user can create one. Access is defined entirely by the bot token: as Telegram states, everyone who has the token has full control of the bot. Ownership can be transferred through BotFather, and a leaked token is rotated by regenerating it.
Inside a group or channel a bot holds no rights until it is added and, optionally, promoted to administrator. By default a bot runs in Privacy Mode and sees only commands directed at it; an admin bot can see all messages. So a bot's reach is a deliberate, revocable grant made by a chat's human admins (Bot features).
Telegram Business: fine-grained, per-chat rights
Telegram Business lets the account owner connect one external bot to act on their behalf. The connection is finely scoped — the owner grants a specific subset of the fourteen businessBotRights (for example reply, read_messages, delete_sent_messages, edit_bio, manage_stories, transfer_stars) and controls exactly which chats the bot may act in (existing or new, contacts or non-contacts, with include/exclude lists).
The owner can pause the bot per chat or disconnect it entirely at any time. Messages the bot sends appear under the owner's own name and avatar, flagged internally as sent via the business connection. Currently only one business bot can be connected per account (Connected business bots).
Verification
Telegram does not verify ordinary user accounts. Official checkmarks are granted to eligible channels, groups and bots through @VerifyBot. Since early 2025, Telegram also supports third-party verification, where an already-verified organization can badge other entities through its own verified bot.
Note that verification is a trust signal, not an access unlock — an unverified bot has the same technical capabilities as a verified one.
Frequently asked questions
Who controls a Telegram bot?
Whoever holds the bot token. Telegram states plainly that everyone with the token has full control. There is no per-user role model for bots — the token itself is the credential, transferable through BotFather and regenerable if leaked.
Is Telegram Business a separate account?
No. Telegram Business is a set of features layered on a personal account for Telegram Premium subscribers. The human owner remains the principal and can connect one external bot with a scoped, revocable set of rights.
Can a Telegram bot read every message in a group?
Only if promoted. By default bots run in Privacy Mode and see only commands directed at them; a bot made a group administrator can see all messages. Reach is granted by the chat's human admins and can be revoked.
Last updated