In brief
In a business portfolio, access works on two levels: access to the portfolio (adding or removing people, changing settings) and access to each asset (a Page, an ad account, a pixel).
Why it matters
You give everyone just what they need: a graphic designer doesn’t need to see billing, an intern doesn’t need to delete an account.
The steps
- Open Business settings, then Users, then People.
- Click Add and enter the person’s business email.
- Choose their portfolio access: limited access for most people, administrator only for trusted people.
- Tick the relevant assets (Page, ad account, pixel).
- For each asset, choose the access level: manage campaigns, view performance, or full access.
- Send the invitation: the person has to accept it.
- For an agency, add them as a partner instead: they keep their own accounts, and you keep ownership.
Pitfalls to avoid
- Giving everyone the administrator role.
- Having only one administrator.
- Forgetting to remove access for someone who leaves the team or an agency whose assignment has ended.
- Sharing a password instead of inviting.
Key takeaways
- Principle of least privilege: give the minimum necessary.
- At least two administrators, two-factor authentication for everyone.
- Do an access review every quarter.
Practice in TRIALO
In a class, the teacher sees the list of their students but not their campaigns: it’s the same principle of separating access.