Action
How to Set Up a System User on Facebook
Create a system user to let software make API calls to your business assets.
Is this your situation?
You run a server or software tool that needs to make API calls to your Pages, ad accounts or catalogs. You want to set up a system user in your business portfolio to handle this.
The short answer
Go to Settings in Meta Business Suite to add a new system user. A system user token can only be shared once.
Before you start
- Confirm system user access Not all businesses have access to system users.Verify: Check whether System users appears in the Users tab.
- Confirm app ownership A business must own a Facebook app associated with its business portfolio.Verify: Check your portfolio's connected apps.
- Plan access scope A separate system user should be created for each access type.Verify: List the assets this user needs.
- Decide which type to create There are 2 types of system users.Verify: Decide: regular or admin system user.
How Facebook handles this
- System users represent servers or software that make API calls to assets managed by a business portfolio.
- There are 2 types of system users.
- Regular system users can only access the assets they have permission for.
- An admin system user has the most permissions among system users.
Step by step
- Go to Settings Open Business Suite Settings for your business portfolio.Where: Meta Business Suite → SettingsConfirm: Check that the Settings page has loaded.
- Select System users Select System users in the Users tab in the left sidebar.Where: Settings → Users → System usersConfirm: Check for the System users list in the sidebar.
- Add a new system user Click Add new system user to start creating one.Where: System users → Add new system userConfirm: Check the screen for a name field.
- Name and create Give a name to the system user and click Create system user.Where: Business Settings → System Users → AddConfirm: Check the System users list for the new name.
- Assign assets Assign assets such as Pages, ad accounts and catalogs to the system user.Where: System users → Assign assetsConfirm: Check the assigned assets list for the ones you selected.
- Generate a token Click Generate new token to start the token process.Where: System users → Generate new tokenConfirm: Check the screen for the app and permissions selection.
- Select app and permissions Select your app and your permissions, then click Generate token.Where: Business Settings → System UsersConfirm: Check the screen for the generated token string.
- Save the token Copy and save your token after generating it.Where: Business Settings → System UsersConfirm: Check that you have stored the token outside the dialog.If this fails: Each new system user requires a new generated token.
Common mistakes
- Losing the token A system user token can only be shared once.Why it happens: You closed the dialog before copying the token down.
- Overusing the admin system user Use of the admin system user should be limited to administrative actions such as assigning permission.Why it happens: The admin system user has the most permissions among system users.
- Mixing access types on one user A separate system user should be created for each type of access needed.Why it happens: You gave one system user broad access instead of separating tasks.
- Not safeguarding the admin token The admin system user token should be carefully safeguarded because it has the most permissions.Why it happens: An admin system user can create system users.Already happened: If you suspect token exposure, audit who has access.
Roles at a glance
| Type | Can create system users | Can access assets | Token handling |
|---|---|---|---|
| Admin system user | Can create system users. | Has the most permissions among system users. | Token should be carefully safeguarded. |
| Regular system user | Not stated by Facebook | Can only access the assets it has permission for. | Token can only be shared once. |
| Admin system user | Can add accounts. | Can assign permissions. | Use should be limited to administrative actions such as assigning permission. |
| System user (general) | Not stated by Facebook | Should be given access to assets and used for most API calls. | Each new system user requires a new generated token. |
| System user (general) | Not stated by Facebook | Represents servers or software that make API calls to assets managed by a business portfolio. | Not all accounts have access to system users. |
Keeping track of who has access
Once your system user is set up, you want to track which assets and tokens it can reach. Delvia helps you keep that track current as your access setup grows.
Was this helpful?