How Meta's Two-Layer Access Model Works
Access comes in two layers: who is in the portfolio, and which assets they can touch. Owning the asset is what unlocks full control. Here is the model that ties it all together.
Almost every Facebook access confusion clears up once you see the two layers. Layer one is portfolio membership: who is part of your Business Portfolio at all. Layer two is asset access: which specific Pages, ad accounts, and datasets each of those people can actually touch, and at what level. Being in the portfolio gets you in the building; asset access decides which rooms you can enter. You have to set both — being in layer one grants nothing in layer two on its own.
Layer one: who is in the portfolio
The first layer is membership of the Business Portfolio. You add people (by their personal profile) and partners (by their portfolio ID) to the portfolio. This says "this person or business is part of our world" — but it does not, by itself, let them see or do anything with your assets.
This is the step everyone remembers to do and then stops at, which is why "I added them but they can't see anything" is such a common complaint. Membership is necessary but not sufficient.
Layer two: which assets they can touch
The second layer is asset assignment. For each member or partner, you grant access to specific assets — this Page with Full control or a set of tasks, that ad account as Advertiser, this dataset for viewing. Until you do this, a portfolio member sees nothing.
And here ownership enters the picture: full control of an asset is only possible when your portfolio actually owns it. If a Page or ad account belongs to someone else's portfolio, the most you can be granted is access — never ownership-level control. Owning the asset is the thing that unlocks the top of layer two.
What layer two looks like for a Page
Asset access on a Page comes as Full control plus task-based permissions — assigned per person, on top of portfolio membership.
| Role | Where it lives | Can do | Cannot do |
|---|---|---|---|
Facebook Access — Full control Can delegate to others | Page → Settings → New Pages experience → Page accessEntire Page |
| — ⚠ Equivalent to legacy "Admin". Tightly limit who has this. |
Task access — Content | Page → Settings → Page access → Task accessContent management |
| — |
Task access — Messages and community activity | Page → Settings → Page access → Task accessInbox and community |
| — |
Task access — Ads | Page → Settings → Page access → Task accessAds and boosted posts |
| — |
Task access — Insights | Page → Settings → Page access → Task accessRead-only analytics |
| — |
Frequently asked questions
Delvia
Access issues are easier to prevent when roles, owners, and responsibilities are recorded clearly
Most access problems trace back to the same gap — no clear record of who has access, what role they hold, and what should happen when that changes. Delvia helps you keep that record so problems are visible before they become incidents.