Who can use this feature?
Workspace Owners, Super Admins, Admins, and Users
Only supported using the Cerby web app
As a user with any workspace role in Cerby, except Guest User and Login-Only, you can connect a business hub integration to centrally manage the users and assets (such as Facebook Pages and Ad accounts) of Meta Business Manager (now Meta Business Portfolio).
When you connect the business hub, you become its Owner, and you can perform the following user and access management tasks through automated tasks and API calls executed by the Cerby agent:
Check for updates
Invite app members
Update app members’ roles
Remove app members
TIP: For more details about the automated tasks of a business hub, how it works, and the supported apps, read the article Explore Apps.
Additionally, you can perform the following actions to manage access to your Meta Business Manager for external collaborators:
Invite users to your workspace as guest users or local partners, with secure credentials provided and managed by Cerby.
Connect a native partner to your workspace to gain visibility on the partner’s users with shared access to the assets of your Meta Business Manager. For more information, read the article Connect a Meta Business Manager native partner to Cerby.
This article provides instructions on how to connect a business hub for Meta Business Manager. For other app-specific articles and videos, review the Connecting your business hubs collection in the Cerby Help Center.
Requirements
The following are the requirements to connect the business hub:
Meta Business Manager
A user account with the Full control role on your Meta Business Manager
An existing primary page associated with your Meta Business Manager. For instructions, read the article Change your primary Page in Meta Business Suite or Business Manager
The user management and login method for your business hub identified to select the corresponding option when connecting your app. For more information, read the User management and login method section of the article Explore Apps
The Business Manager ID of your Meta Business Manager. To find it, complete the instructions in the article Find your business ID in Meta Business Manager
Cerby
A Cerby workspace
A Cerby user account with the Owner, Super Admin, Admin, or User role
Groups configured in your identity provider (IdP) If you want to leverage automatic user provisioning and deprovisioning from your apps based on group assignment events. For more information, read the article Manage app members from your IdP
Connect a business hub for Meta Business Manager
To connect a business hub for Meta Business Manager, you must complete the following main steps in Meta and the Cerby web app dashboard:
The following sections describe each main step.
1. Create a system user in Meta Business Manager
To create a system user with an Admin role in Meta Business Manager, you must complete the following steps:
IMPORTANT: Meta may restrict user management actions from Cerby on the business center for at least seven days after creating a system user; therefore, you may be unable to invite and remove users, and update their roles. Cerby recommends waiting seven days to start using the business hub to manage user access to Meta Business Manager.
Log in to your Meta Business Manager.
Select the Settings option from the left navigation drawer. The Settings view is displayed.
Select the System users option from the Users drop-down menu in the left pane. The System users page is displayed.
NOTE: If you have already created a system user with an Admin role, continue to step 8.
Click the Add button. The Create system user dialog box is displayed.
Enter a name for the system user in the System user name field. For example, Cerby.
Select the Admin option from the System user role drop-down list.
Click the Create system user button. The dialog box closes, and the Cerby system user is displayed on the System users page, as shown in Figure 1.
Figure 1. System Users page
Note down the ID of the system user you have created. You must share it with Cerby later.
The next step is 2. Connect your Meta Business Manager to the Cerby Assets Manager app.
2. Connect your Meta Business Manager to the Cerby Assets Manager app
To connect your Meta Business Manager to the Cerby Assets Manager app, you must complete the following steps in your Meta Business Manager:
Select the Apps option from the Accounts drop-down menu in the left pane. The Apps page is displayed.
Click the Add button. The What do you want to do? dialog box is displayed.
Select the Request access to an app ID option. The Request an app dialog box is displayed.
NOTE: If the How Will You Work With Cerby, Inc.? dialog box is displayed instead the Request an app dialog box, complete the following steps:
Select the Other option.
Enter Security provider to help with identity and access governance in the Other input field.
Click the Next button. The Request an app dialog box is displayed.
Enter 2965389650414399 in the App ID field.
Click the Request app button. The dialog box closes.
Contact the Cerby Support team via email at support@cerby.com or through the help chat to let them know that you have requested access to the Cerby Assets Manager app. You must share the system user ID with them.
IMPORTANT: You must wait until the Cerby Support team grants you access to the Cerby Assets Manager app to continue. On the Apps page, the Cerby Assets Manager app must change its status from “Request sent” to active with the “Cerby, Inc. owns this” message.
The next step is 3. Generate a token for the Meta Business Manager system user.
3. Generate a token for the Meta Business Manager system user
To generate a token for the Meta Business Manager system user, you must complete the following steps in your Meta Business Manager:
Select the System users option from the Users drop-down menu in the left pane. The System users page is displayed.
Select the system user with the Admin role. A collapsible pane is displayed to the right with the details of the system user.
Click the Generate token button. The Generate token wizard is displayed on the Select app page, as shown in Figure 2.
Figure 2. Select app page of the Generate token wizard
Select the Cerby Assets Manager option from the Select app drop-down list.
Click the Next button. The Set expiration page of the wizard is displayed.
Select the Never option from the Token expiration section.
Click the Next button. The Assign permissions page of the wizard is displayed.
Select the following options from the Select permissions drop-down list:
ads_management
business_management
catalog_management
pages_manage_metadata
pages_read_engagement
pages_show_list
Click the Generate token button. The Done page of the wizard is displayed with the token.
Click the Copy button to copy the token so you can save it, because you need it later.
Click the Done button. The wizard closes.
The next step is 4. Add a business hub and connect it to Meta Business Manager.
4. Add a business hub and connect it to Meta Business Manager
To add a business hub and connect it to Meta Business Manager, you must complete the following steps in the Cerby platform:
Log in to your corresponding Cerby workspace.
Select the Business Hubs option from the left navigation drawer. The Business Hubs view is displayed.
Click the Connect Business Hub button located at the top-right corner of the page. The Connect your Business Hubs to Cerby dialog box is displayed.
TIP: Select the Don’t show this again option to skip this step the next time you connect a new business hub.Click the Get started button. A wizard is displayed on the Select app page.
Select Meta Business from the catalog. The Enter app details page is displayed on the wizard.
Enter and select your app information in the corresponding fields:
Label in Cerby: It is the name to assign to your business hub in Cerby, and it will be displayed on the business hub card.
Access Token: It is the token that you’ve previously generated in your Meta Business Manager.
Business ID: It is your Meta Business Manager ID. For instructions on how to find it, read the Requirements section.
App Id: It is the ID of the Cerby Assets Manager app to which you requested access previously: 2965389650414399.
User management and login method: It is the way your users log in to the app and determines whether they must save their login credentials as a Cerby account connected to the business hub. You must select one of the following methods:
Single sign-on (SSO): Access is managed by your identity provider, and users log in with SSO authentication. They are not asked to save their credentials in Cerby.
Username and password: Cerby manages account security and access, and users log in with their credentials after saving them in Cerby.
Click the Connect app button. The wizard closes, and a success message box is displayed.
The corresponding business hub is also displayed on the Business Hubs view.
The next step is 5. Check for updates to import users, roles, and assets to Cerby.
5. Check for updates to import users, roles, and assets to Cerby
To check for updates in your app to identify and import users, roles, and assets to Cerby, you must complete the following steps in the Cerby platform:
Select the Business Hubs option from the left navigation drawer. The Business Hubs view is displayed.
Click the Settings (
) icon of the corresponding business hub card. The business hub details page is displayed with the Settings tab activated.
Click the Check for updates button located at the top right of the page. A message box is displayed with information about the process.
NOTE: The check and import process may take a few minutes depending on the number of users and assets, and because Cerby automatically matches users to their corresponding Cerby user account.Confirm that the automated task to check for updates has the “Completed” status by performing any of the following actions:
Click the More details button from the message box.
Select the Automation option from the left navigation drawer to open the Automation view with a list of automated tasks and their status.
NOTE: Cerby automatically performs daily checks for updates for all business hubs, but you can trigger them manually, as described in this section. When a user is deprovisioned from an IdP and a check for updates is performed, Cerby generates a report and sends business hub Owners an email to confirm their removal from the app. For more instructions, read the article Check for updates in your app and apply report.
The next step is 6. Connect your Meta Business Manager user account to the business hub.
6. Connect your Meta Business Manager user account to the business hub
To connect your Meta Business Manager user account to the business hub so Cerby can manage and protect it, you must complete the following steps:
Select the Accounts option from the left navigation drawer. The Accounts view is displayed.
Click the Log in button of the corresponding Meta Business account card. The Connect your Meta Business Account dialog box is displayed.
Enter the login credentials of your Meta Business Manager user account.
Click the Connect account button. The dialog box closes, and a success message box and a new account card are displayed.
The next step is 7. Auto-claim the Owner role in Cerby.
7. Auto-claim the Owner role in Cerby
When your Cerby account has a different email than your Facebook profile, the integration does not automatically match the Owner role in Cerby with the Admin role in your Meta Business Manager; therefore, you must auto-claim it. To do so, you must complete the following steps:
Select the Business Hubs option from the left navigation drawer. The Business Hubs view is displayed.
Click the More options (
) icon of the Meta Business card. A drop-down list is displayed.
Select the View Members option from the list. The business hub details page is displayed with the Members tab activated and a table of users in the User Overview section.
Activate the Unmatched users tab in the User Overview section.
Auto-claim the Owner role on the business hub by completing the following steps:
Click the Match user button that is displayed when you hover over the corresponding user from the table. The Match user dialog box is displayed.
Enter your username or email address in the Match with search bar. A list of users that match your search is displayed.
Select the corresponding option from the list.
Click the Next button. The Select Cerby role dialog box is displayed.
Select the Owner option from the drop-down list.
Click the Match user button. The dialog box closes, and a success message box is displayed.
NOTE: To verify that you have the correct roles, activate the Onboarded users tab in the User Overview section. The Owner and Admin roles must be displayed in the Cerby Role and App access columns for your Cerby account.
The next step is 8. Manage unmatched users.
8. Manage unmatched users
During a check for updates, Cerby automatically matches app members to the Cerby user accounts that correspond to their email addresses, including existing guest users, local partners, and native partners. Manual matching is required when apps don't provide email addresses and for app members using personal or external accounts that couldn’t be identified or are not in the corporate directory.
To view the status of the imported app members, you must complete the following steps:
Select the Business Hubs option from the left navigation drawer. The Business Hubs view is displayed.
Click the More options (
Select the View Members option from the list. The business hub details page is displayed with the Members tab activated.
App members are displayed in the following tabs of the User Overview section:Unmatched users: This tab displays the users who were not automatically matched.
Onboarded users: This tab displays the users matched to their Cerby user account.
Guest users: This tab displays the users who were matched to an existing Cerby user account but it doesn’t exist in the corporate directory, such as external collaborators.
For unmatched users, you can perform one of the following actions:
The following sections describe each action.
Match users
To match users, you must complete the following steps from the Unmatched users tab of the business hub details page:
Click the Match user button of the corresponding user. The Match user dialog box is displayed.
Enter the username or email address of the user you want to match and invite in the Match with field. The user is displayed on a list.
Select the user from the list.
Click the Next button. The Select Cerby role dialog box is displayed.
Select the role to assign to the user on the business hub Cerby role drop-down list:
Owner: This role enables sharing access and managing business hub settings in Cerby.
Collaborator: This role enables only logging in to the app from Cerby.
Click the Match user button. The dialog box closes, and a success message box is displayed. The user is moved to the Onboarded users tab.
Remove unmatched users
To remove unmatched users, you must complete the following steps from the Unmatched users tab of the business hub details page:
IMPORTANT: When removing an unmatched user, Cerby performs an automated task to revoke the user’s seat and permissions in Meta Business Manager.
Click the More options (
Select the Remove user option from the list. The Remove user? dialog box is displayed.
Click the Remove user button. The dialog box closes, and a success message box is displayed. The user is removed from the app via an automated task.
Exempt unmatched users
Exempted users keep their user accounts or seats active in your app, but you cannot manage them through Cerby.
To exempt unmatched users, you must complete the following steps from the Unmatched users tab of the business hub details page:
Click the More options (
Select the Exempt user option from the list. The exempt user dialog box is displayed.
Enter a reason for exempting the user in the Provide a reason field.
Click the Exempt member button. The dialog box closes, and a success message box is displayed. The user is moved to the Exempted users tab.
Use your business hub
The following are the supported features of business hubs you can use: