Viber Business Account: Access & Permissions
TL;DR
On Viber (Rakuten Viber), business presence centers on a verified Business Account and the Viber Business Messages service. Every business account must be approved by Viber and pass brand verification, and Business Messages is applied for and operated through an official partner (BSP). Viber publishes no named multi-role hierarchy — the documented model is minimal: a bot administrator, with authorization effectively resting on a secret token, and team management pushed onto the partner platform.
On this page
Account and approval
Business presence on Viber centers on a verified Business Account / Commercial Account and the Viber Business Messages service used to reach users by phone number, alongside a chatbot surface.
Every business account must be approved by Viber and pass brand verification before it can send, and for the Business Messages service companies apply through one of Viber's official partners (BSPs) — such as tyntec, Infobip, Sinch or CM.com — who manage approval and technical setup end to end (Viber Support). Since February 2024, bots can only be created on commercial terms.
A thin role model
Unlike WeChat or LINE, Viber does not publish a named multi-role permission hierarchy for business accounts. The documented model is minimal: a bot has an administrator (its creator), and any broader team access is handled by the partner/BSP platform rather than by Viber roles (Viber REST API).
In effect, authorization is the token — there is no owner/admin/agent taxonomy to assign.
Who holds the API keys
Each account holds a secret authentication token sent as the X-Viber-Auth-Token header on every API request, generated at account creation and viewable only by admins (CM.com).
For Business Messages the BSP typically holds and manages that credential on the brand's behalf, which makes a partner effectively mandatory — the same intermediary-required pattern as Apple, RCS and KakaoTalk.
Verification
Verification is what confers trust: a verified Business/Commercial Account earns the verified tick (green on Android, blue on iOS) and shows the official brand name, logo and business designation, which is the primary signal distinguishing a legitimate sender from an impersonator (MessageFlow).
Frequently asked questions
What roles can I assign on a Viber business account?
Viber publishes no named role hierarchy. A bot has an administrator (its creator), and broader team access is handled by the partner/BSP platform rather than by Viber itself. In practice, possession of the account's authentication token is the authorization.
Do I need a partner to send Viber Business Messages?
Effectively yes. Businesses apply through an official Viber partner (BSP) that manages approval and setup, and the partner typically holds the API credential on the brand's behalf. Since February 2024, Viber bots are commercial-terms only.
What is the Viber verified tick?
A trust badge granted with a verified Business/Commercial Account — green on Android, blue on iOS — that displays the official brand identity and helps users distinguish a legitimate sender from an impersonator.
Last updated