Telegram Business Accounts: Bots, Roles & Permissions
TL;DR
Telegram has two very different business models. A BotFather bot has no company account and no verification to exist — control is defined entirely by the bot token, and whoever holds it has full control. Telegram Business is a feature set on a personal account (for Telegram Premium subscribers) that can connect one external bot, granting it a fine-grained, per-chat set of fourteen rights the owner can revoke at any time. There is no organizational role hierarchy in the corporate sense.
On this page
Two governance models
Telegram offers two fundamentally different ways for a business to operate, with different control models.
- Bot API bots — created by any Telegram user through @BotFather, which issues a bot token. There is no business-account object and no legal-entity verification.
- Telegram Business — a set of features on a personal account, available to Telegram Premium subscribers. It is not a separate account class; the human account owner remains the principal.
The two are often combined: a business connects a bot to a Telegram Business account so the bot can reply on the owner's behalf.
Bots: the token is the control
A bot has no roles and no verification requirement to exist — any user can create one. Access is defined entirely by the bot token: as Telegram states, everyone who has the token has full control of the bot. Ownership can be transferred through BotFather, and a leaked token is rotated by regenerating it.
Inside a group or channel a bot holds no rights until it is added and, optionally, promoted to administrator. By default a bot runs in Privacy Mode and sees only commands directed at it; an admin bot can see all messages. So a bot's reach is a deliberate, revocable grant made by a chat's human admins (Bot features).
Telegram Business: fine-grained, per-chat rights
Telegram Business lets the account owner connect one external bot to act on their behalf. The connection is finely scoped — the owner grants a specific subset of the fourteen businessBotRights (for example reply, read_messages, delete_sent_messages, edit_bio, manage_stories, transfer_stars) and controls exactly which chats the bot may act in (existing or new, contacts or non-contacts, with include/exclude lists).
The owner can pause the bot per chat or disconnect it entirely at any time. Messages the bot sends appear under the owner's own name and avatar, flagged internally as sent via the business connection. Currently only one business bot can be connected per account (Connected business bots).
Verification
Telegram does not verify ordinary user accounts. Official checkmarks are granted to eligible channels, groups and bots through @VerifyBot. Since early 2025, Telegram also supports third-party verification, where an already-verified organization can badge other entities through its own verified bot.
Note that verification is a trust signal, not an access unlock — an unverified bot has the same technical capabilities as a verified one.
Frequently asked questions
Who controls a Telegram bot?
Whoever holds the bot token. Telegram states plainly that everyone with the token has full control. There is no per-user role model for bots — the token itself is the credential, transferable through BotFather and regenerable if leaked.
Is Telegram Business a separate account?
No. Telegram Business is a set of features layered on a personal account for Telegram Premium subscribers. The human owner remains the principal and can connect one external bot with a scoped, revocable set of rights.
Can a Telegram bot read every message in a group?
Only if promoted. By default bots run in Privacy Mode and see only commands directed at them; a bot made a group administrator can see all messages. Reach is granted by the chat's human admins and can be revoked.
Related
Business Messaging: Access, Roles & Permissions Across Platforms
Every major messaging platform gates business access differently. The single most important difference is who holds the technical keys: some platforms (Apple, Google RCS, KakaoTalk, Viber) require an approved intermediary you cannot bypass, while others (Telegram, LINE, WhatsApp, Zalo) let a business hold its own API credentials. Role models range from granular named matrices (WhatsApp, LINE, Zalo) to almost none (Telegram, where possessing the token is control). Asian platforms additionally gate account creation on a registered legal entity.
Read →WhatsApp Business Account: Roles & Permissions
The WhatsApp Business Platform is governed through a Meta Business Portfolio that owns one or more WhatsApp Business Accounts (WABAs). People get Full control or Partial access; programmatic access is carried by scoped system-user tokens the brand can hold directly or delegate to a Tech Provider. Capability is tiered by verification and quality rating — from 250 recipients a day up to unlimited.
Read →What is a Telegram CRM?
A Telegram CRM is a customer relationship management system that integrates directly with Telegram, syncing your DMs, group chats, and channel messages to contact records, conversation history, and deal pipelines — so relationships built in Telegram do not stay trapped in your phone.
Read →What is a Unified Inbox?
A unified inbox consolidates conversations from multiple communication channels — messengers, email, and more — into a single interface, so you can triage, read, and reply across all of them without switching apps and without losing track of who said what.
Read →Last updated