Viber Business Account: Access & Permissions
TL;DR
On Viber (Rakuten Viber), business presence centers on a verified Business Account and the Viber Business Messages service. Every business account must be approved by Viber and pass brand verification, and Business Messages is applied for and operated through an official partner (BSP). Viber publishes no named multi-role hierarchy — the documented model is minimal: a bot administrator, with authorization effectively resting on a secret token, and team management pushed onto the partner platform.
On this page
Account and approval
Business presence on Viber centers on a verified Business Account / Commercial Account and the Viber Business Messages service used to reach users by phone number, alongside a chatbot surface.
Every business account must be approved by Viber and pass brand verification before it can send, and for the Business Messages service companies apply through one of Viber's official partners (BSPs) — such as tyntec, Infobip, Sinch or CM.com — who manage approval and technical setup end to end (Viber Support). Since February 2024, bots can only be created on commercial terms.
A thin role model
Unlike WeChat or LINE, Viber does not publish a named multi-role permission hierarchy for business accounts. The documented model is minimal: a bot has an administrator (its creator), and any broader team access is handled by the partner/BSP platform rather than by Viber roles (Viber REST API).
In effect, authorization is the token — there is no owner/admin/agent taxonomy to assign.
Who holds the API keys
Each account holds a secret authentication token sent as the X-Viber-Auth-Token header on every API request, generated at account creation and viewable only by admins (CM.com).
For Business Messages the BSP typically holds and manages that credential on the brand's behalf, which makes a partner effectively mandatory — the same intermediary-required pattern as Apple, RCS and KakaoTalk.
Verification
Verification is what confers trust: a verified Business/Commercial Account earns the verified tick (green on Android, blue on iOS) and shows the official brand name, logo and business designation, which is the primary signal distinguishing a legitimate sender from an impersonator (MessageFlow).
Frequently asked questions
What roles can I assign on a Viber business account?
Viber publishes no named role hierarchy. A bot has an administrator (its creator), and broader team access is handled by the partner/BSP platform rather than by Viber itself. In practice, possession of the account's authentication token is the authorization.
Do I need a partner to send Viber Business Messages?
Effectively yes. Businesses apply through an official Viber partner (BSP) that manages approval and setup, and the partner typically holds the API credential on the brand's behalf. Since February 2024, Viber bots are commercial-terms only.
What is the Viber verified tick?
A trust badge granted with a verified Business/Commercial Account — green on Android, blue on iOS — that displays the official brand identity and helps users distinguish a legitimate sender from an impersonator.
Related
Business Messaging: Access, Roles & Permissions Across Platforms
Every major messaging platform gates business access differently. The single most important difference is who holds the technical keys: some platforms (Apple, Google RCS, KakaoTalk, Viber) require an approved intermediary you cannot bypass, while others (Telegram, LINE, WhatsApp, Zalo) let a business hold its own API credentials. Role models range from granular named matrices (WhatsApp, LINE, Zalo) to almost none (Telegram, where possessing the token is control). Asian platforms additionally gate account creation on a registered legal entity.
Read →RCS for Business: Access, Roles & Permissions
Google's RCS for Business (formerly RCS Business Messaging) separates the brand that owns an agent, the partner or RCS Solution Provider that builds and operates it, and the carriers it launches on. Brands cannot self-onboard — Google moved to a partner-only model. The documented role model is thin (a Partner Account Owner and a Technical Point of Contact), going live requires brand verification and launch approval, and the operating partner typically holds the credentials.
Read →Zalo Official Account: Roles & Permissions
A business presence on Zalo is an Official Account (OA). An Advertising Profile needs no license but can only run ads; a verified OA requires a Vietnamese business registration license and unlocks messaging, broadcasts, chatbot and ZNS. Zalo publishes an unusually clear six-role model, and the OA owner authorizes its own app directly — a brand can hold its own tokens, so a partner is optional.
Read →What is a Unified Inbox?
A unified inbox consolidates conversations from multiple communication channels — messengers, email, and more — into a single interface, so you can triage, read, and reply across all of them without switching apps and without losing track of who said what.
Read →Last updated