As a Meta Business Manager admin, you can grant and manage access to the Meta for Work tools for other users.
With Meta Work Accounts, your users log in to Meta devices and services for professional use, such as Meta Business Manager, without requiring them to have a personal Facebook profile. These accounts offer organizations greater security control over employee accounts with features like single sign-on (SSO) authentication and automatic user provisioning from an identity provider (IdP), such as Okta.
This article describes how you can best use Meta Work Accounts and Meta Business Manager to perform the following management actions:
The following sections describe each management action.
Manage the Meta for Work interfaces
Admins of Meta Work Accounts can manage the following three main components of the Meta for Work interfaces:
The following sections describe each component.
Admin Center
The Admin Center console of the Meta Work Accounts is the central hub for admins, enabling them to manage the organization, including adding or removing members, verifying domains, and managing IdP integration settings.
Figure 1 shows the home page of the Admin Center console.
Figure 1. Home page of the Admin Center console for Meta Work Accounts
You can find more information about the Admin Center and how to use it in the following official documentation:
Business Manager
Business Manager is the standard settings console used by Meta Business Manager owners. With Meta Work Accounts, you can assign assets to users through their work credentials instead of a personal Facebook profile.
Migration Center
The Migration Center is essential for tracking the transition to Meta Work Accounts. It provides admins with the tools to monitor and manage the migration progress.
Figure 2 shows the migration status report of the people in the portfolio.
Figure 2. Migration status report in Meta Migration Center
To see the migration report, complete the following steps:
Log in to your Meta Business Manager. The IT set up page is displayed.
Select the People in business portfolios option from the left navigation drawer. The People in business portfolios page is displayed. On this page, you can see the following user information:
Name
Email
Business portfolio
Access
Migration status
Click the Migrate people button. The Migrate page is displayed. On this page, you can see your company's high-level migration status report.
Click the Manage button on the right side of your company. The Overview of the Migration Status page is displayed. On this page, you can see more details about the people who migrated and the business portfolio details.
For more information about how to plan and migrate your portfolio, read the Overview of managed Meta accounts setup and migration in Business Manager official documentation.
Invite external users to your Meta Business Manager
To invite external users to your Meta Business Manager, complete the following steps:
Log in to your Meta Business Manager.
Select the People option from the left navigation drawer under the Users section. The People page is displayed. On this page, you can see the list of people who belong to your Meta Business Manager.
Click the Invite people button from the menu at the top of the people list. The Invite people dialog box is displayed.
Perform the following actions in this dialog box:
Enter the email address of the user you want to invite.
Click the Next button. The Partial access dialog box is displayed.
Configure the access to apps and integrations and the controls the user can have in your instance.
Click the Confirm button. The User added dialog box is displayed.
Click the Done button. The dialog box closes, and the user you invited is added to the People list with the Inactive status.
Assign assets to the user you have just invited by performing the following actions:
Click the user name on the People page. The Summary of assigned assets is displayed. Because the user is new, no assets are displayed on the page.
Click the Assign assets button located at the top menu. The Assign assets and set permissions dialog box is displayed.
Select the assets and permission you want to assign to the user.
Click the Save changes button. The Assets Added dialog box is displayed.
Click the Done button. The dialog box closes, and you can now see the assets the user has assigned.
After inviting and assigning the user assets and permissions, the end user must accept the invitation and access your Meta Business Manager.
Configure Meta Work Accounts for SSO and automatic user provisioning with Okta
While the Cerby platform can be configured directly with Okta for SSO and automatic user provisioning via SCIM, with Meta Work Accounts, the configuration is now between Meta and Okta.
For instructions on how to perform the configuration, read the Configure SSO and user provisioning between Meta and Okta via Meta Work Accounts article.
Deprovision users
When you deprovision a user from the IdP, either by entirely removing them or unassigning the app, the status of the deprovisioned user is different depending on the tool:
Regardless of how the status is displayed, Meta will stop redirecting users to the SSO authentication page when they are deprovisioned.
The following sections explain the different statuses of deprovisioned users.
Admin Console
When you access the People section in the Admin Console, the deprovisioned user’s status is Deactivated, as shown in Figure 3.
Figure 3. View of a deprovisioned user in the Meta Admin console
Business Manager
When you access the People option from the Users drop-down list of the Business Manager main page, the deprovisioned user’s information is displayed with asterisks, as shown in Figure 4.
Figure 4. View of a deprovisioned user on the Meta Business Manager page
Troubleshooting: Facebook refused to connect error when activating your work account
When following the next steps to activate a Meta Work Account, you may encounter the error message “business.facebook.com refused to connect”:
Access the Business Manager main page.
Select the Business Account info option from the left navigation drawer. The invitation window appears, directing you to activate your Meta Work Account.
Click the Activate your work account button. The Activate your Meta work account page is displayed.
Click the Continue button. The information of your organization’s business account appears.
Click the Activate button.
If the “business.facebook.com refused to connect” error message is displayed, as shown in Figure 5, share another item within the platform.
Figure 5. “business.facebook.com refused to connect” error message in the Settings view of your Meta Business Manager
Troubleshooting: “Some people couldn’t be added” error when adding a user from an unknown domain
Meta enables users to be created at the organization level, but these users cannot be added to portfolios (Meta Business Managers) until domains get verified.
When inviting members from domains that are not verified within the organization, the “Some People Couldn’t Be Added” error is shown, disabling the Next button.
To solve this problem, IT administrators must add and verify the domain as part of the organization’s profile in the Meta Work Accounts settings. After verification, invitations to members from these domains can be processed successfully.