How Meta's Two-Layer Access Model Works
Facebook splits access into two layers: who can enter the business portfolio, and what they can do with each asset inside it.
Is this your situation?
You are trying to work out why someone's access to the portfolio and their access to a specific Page or ad account seem to be two different questions. You want to know what each layer controls.
What it is
People are assigned access to a business portfolio and business assets through a 2-layer permissions system. The full control and partial access levels apply to both business portfolios and business assets in a portfolio, such as Facebook Pages, Instagram accounts and ad accounts. In Meta Business Suite, there are 2 levels of access: full control and partial access. Full control is the highest level of access people can have in Meta Business Suite. With partial access, people's permissions are limited to working only on the assets or tasks they've been assigned.
How Facebook handles this
- The full control and partial access levels apply to both business portfolios and business assets in a portfolio.
- People with full control of a business portfolio can see all business assets in the business portfolio.
- People can have full control of a business asset without having full control of the business portfolio.
- Business portfolio permissions override all other permissions.
- You can change someone's permissions for a portfolio or asset at any time.
Side by side
| Layer | Full access level | Limited access level |
|---|---|---|
| Business portfolio | Full control | Partial access |
| Business asset | Full control | Partial access |
| Basic access scope | Can view who has full control of the portfolio | Can work only on assigned assets |
| Full control of an asset | Has all permissions for that asset, including the ability to delete it | Limited to assigned tasks |
Common mistakes
- Assuming portfolio access means asset access Basic access lets people work only on assigned assets.Why it happens: Basic access is the default level given on joining a portfolio.Already happened: Review who really owns a Facebook Page.
- Assuming partner asset access matches your own A shared partner asset limits you to the permissions that partner assigned.Why it happens: A partner with partial access can only assign those assigned tasks.
- Assuming asset control means portfolio control Someone can have full control of an asset without full control of the portfolio.Why it happens: Access to a portfolio and its assets works through a 2-layer system.
Quick reference
| Term | What it means |
|---|---|
| Business portfolio | Allows organizations to manage access and permissions of people who work on business assets. |
| Full control (portfolio) | Highest level of access in Meta Business Suite. |
| Basic access | Default permission level given when added to a portfolio. |
| Full control (asset) | Has all permissions for that business asset. |
| Partial access (asset) | Limited to assigned assets or tasks. |
| Changing permissions | Can be changed for a portfolio or asset at any time. |
| Override rule | Portfolio permissions override all other permissions. |
| Partner-shared asset | Limited to the specific permissions the partner assigned. |
Frequently asked questions
Can someone with full control of the portfolio see every asset in it?
People with full control of a business portfolio can see all business assets in the business portfolio.
Can someone have full control of one asset but not the portfolio?
People can have full control of a business asset without having full control of the business portfolio.
What does basic access let someone see?
People with basic access can view which people have full control of the business portfolio.
Can access to a portfolio or asset change later?
You can change someone's permissions for a business portfolio or business asset at any time.
Keeping track of who has access
Confusion over who controls the portfolio and who controls a single asset builds as more people and assets get added over time. Delvia keeps both layers visible in one place, so you see portfolio-level and asset-level access together.
Was this helpful?