How to see who has access to your Facebook Page and business portfolio

Where you look depends on whether the Page is in a business portfolio. For a Page outside one, switch into the Page on Facebook and open Settings & privacy > Settings > Page setup > Page access, which lists People with Facebook access and People with task access. For a Page in a business portfolio, someone with full control opens Settings in Meta Business Suite and checks People, Partners and the Page's own list under Accounts > Pages. Apps, CRM tools and leads access are separate lists again.

Each list shows a different kind of access, and none of them shows everything. The sections below go through them in order, say what each entry means, and end with what to remove first and how to keep a record.

First, find out where the Page lives

Open Settings in Meta Business Suite and look under Accounts > Pages. The Facebook Page guide explains how to read what you see: a Page your business owns, a Page another business shared with you, or no Page at all.

Do not assume a Page is outside any portfolio because you never made one. Meta says that when you connect two assets, such as a Page and an Instagram account, and neither is in a business portfolio, Meta creates a new portfolio for you.

A Page outside a business portfolio: Page access

You need Facebook access to the Page. On a computer:

1. Log into Facebook, then click your profile photo in the top right.
2. Click See all profiles, then select the Page.
3. Click the Page's profile picture in the top right to go to the Page.
4. Click Settings & privacy, then Settings.
5. Click Page setup, then Page access.

What the lists mean, in Facebook's words:

• Facebook access comes with full control or partial control. These people can switch into the Page and manage it on Facebook. Anyone with full control can give access to others, remove anyone (including you) and delete the Page.
• Task access lets a person manage the Page from Meta Business Suite or Ads Manager, but not switch into it on Facebook. The tasks are content, messages and community activity, ads and insights.
• Community Manager access is for moderating the chat on the Page's live streams.

For a history of changes, the same Page setup menu has Page Management history. Meta says it shows when people with Facebook access or task access were added or removed, and it still shows actions by people whose access has since been removed. It does not go back before the Page moved to Meta's new Pages experience.

A Page in a business portfolio: three lists in Settings

You need full control of the business portfolio to work with these lists; Meta says that without it you may not see People or Partners at all. In Meta Business Suite, open Settings.

People

People lists the people in your business portfolio. Click a name to see their level for the whole portfolio and, under it, each asset they have with Manage next to it. Meta's levels for a portfolio are:

• Full access (formerly full control): everything, including people, partners, settings and deleting the portfolio.
• Basic (formerly the employee role): only the assets they are assigned.
• Apps and integrations (formerly the developer role): Conversions API, events, apps and access tokens.
• Finance access: an extra option to view or manage transactions, invoices, spend and payment methods.

Meta also offers temporary access, which is basic access that ends by itself after 3 to 75 days.

Partners

Partners, under Users, lists other businesses, such as agencies. Meta says both businesses can see the shared assets in their own Settings. Meta also says the partner gives its own people access inside its own business portfolio, so the agency staff who work through the partner are managed there. System users, also under Users, are servers or software that call Meta's API for your business.

The Page's own list

Under Accounts, click Pages, select the Page and click People. This shows who can work on this one Page, each with Manage. Use it when you care about one Page rather than the whole portfolio. Meta's three levels for a Page in a portfolio are partial access (business tools only), which works only in Meta Business Suite and Ads Manager; partial access (business tools and Facebook), which can also switch into the Page on Facebook; and full control, which can also change the Page's settings and who has access. One of Meta's articles labels this menu Profiles instead of Accounts, so look for either.

Export the list with dates

Meta lets a person with full control download two files from Settings > People > Export:

• People and permissions: each person's role, email, last active date, active or inactive status and whether two-factor authentication is on. The two-factor column only fills in when the portfolio requires two-factor authentication, and people who have not yet accepted an invitation are left out.
• Business history: a log of actions for a date range you pick, such as someone invited to the portfolio, a role changed, or a partner given access to an asset, or that access changed or removed. You can also get it from Business portfolio info.

Pending invitations are in Settings > Requests.

Apps, CRM tools and leads

These are easy to miss, because they hang off people's own accounts.

• Business Integrations. Each person sees the apps they connected with their own Facebook account under Settings & privacy > Settings > Business Integrations, with Active and Removed tabs and a Remove button. Meta says an integration's access to personal information expires after 90 days unused, but that does not end its connection to your business assets.
• CRM tools for lead ads. Meta says that if several Page admins connected the same CRM, each admin has to remove it.
• Portfolio level. Settings also has Integrations and, under Accounts, Apps.
• Leads. Meta says that unless someone with full control customizes leads access, all Page admins and people with messaging permissions can download leads. See who can download your leads.

What to remove first, and in what order

1. Keep two of your own people at full control. Meta recommends two active people with full control of the portfolio, and a Page with nobody at full control is deactivated and scheduled for deletion.
2. People who no longer need access. Meta's Security Center flags people who have not logged into the portfolio for 90 days, especially those with full control, people without passkeys or two-factor authentication, and people whose email addresses are on public domains.
3. Partners you no longer work with. See how to remove an old agency's access.
4. Integrations nobody recognizes. Ask each admin to check their own Business Integrations.

Removing someone from one Page does not remove them from the portfolio, so take them off both if they should have nothing. The steps are in how to remove someone from your Page or business portfolio. Before you click Remove, check who owns each asset: an agency that owns your ad account or dataset has to hand it back first.

Keep a record

Save the two exports with the date in the file name, and note next to each person why they have access and since when. Do it again after every change of staff or agency. When an agency starts, the access checklist shows what it should ask for, so you can check the list against what you actually gave.