> For the complete documentation index, see [llms.txt](https://help.cerby.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.cerby.com/setup-and-admin/business-hubs/connecting-your-paid-social-apps/meta-business-manager/connect-a-business-hub-for-meta-business-manager.md). # Connect a business hub for Meta Business Manager This article describes how to connect a business hub to centrally manage the users and assets of Meta Business Manager from Cerby. {% hint style="info" %} **Who can use this feature?** * Workspace **Owners**, **Super Admins**, **Admins**, and **Users** * Only supported using the Cerby web app {% endhint %} As a user with any workspace role in Cerby, except **Guest User** and **Login-Only**, you can connect a business hub to centrally manage the users and assets (such as Facebook Pages and Ad accounts) of Meta Business Manager (now Meta Business Portfolio). When you connect the business hub, you become its **Owner**, and you can automate the execution of the following tasks: * Sync users * Add users * Update user roles * Remove users Additionally, you can perform the following actions to manage access to your Meta Business Manager for external collaborators: * Invite users to your workspace as [guest users](https://help.cerby.com/getting-started/concepts/user-management/guest-users) or [local partners](https://help.cerby.com/getting-started/concepts/user-management/partners#h-7e4add33a2), with an identity provided and managed by Cerby. * Connect a [native partner](https://help.cerby.com/getting-started/concepts/user-management/partners#h-e7fa9c355c) to your workspace to gain visibility on the partner’s users with shared access to the assets of your Meta Business Manager. For more information, read the article [Connect a Meta Business Manager native partner to Cerby](/setup-and-admin/business-hubs/connecting-your-paid-social-apps/meta-business-manager/connect-a-meta-business-manager-native-partner-to-cerby.md). For more information about business hubs and how they work, read the article [Business hubs](https://help.cerby.com/getting-started/concepts/identity-lifecycle-management-idlcm/business-hubs). *** ## Requirements The following are the requirements to connect the business hub: * Meta Business Manager * A user account with the **Full control** role on your Meta Business Manager * An existing primary page associated with your Meta Business Manager. For instructions, read the article [Change your primary Page in Meta Business Suite or Business Manager](https://www.facebook.com/business/help/1809771339071540?id=180505742745347) * The Business Manager ID of your Meta Business Manager. To find it, complete the instructions in the article [Find your business ID in Meta Business Manager](https://www.facebook.com/business/help/1181250022022158?id=180505742745347) * Cerby * A Cerby workspace * A Cerby user account with the **Owner**, **Super Admin**, **Admin**, or **User** role * Groups configured in your identity provider (IdP) if you want to leverage automatic user provisioning and deprovisioning from your apps based on group assignment events. For more information, read the articles available in the [Managing users via an IdP and business hub](https://help.cerby.com/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub) collection *** ## Connect a business hub for Meta Business Manager To connect a business hub for Meta Business Manager, you must complete the following main steps in Meta and Cerby: 1. [Connect your Meta Business Manager to the Global Assets Manager app](#id-1.-connect-your-meta-business-manager-to-the-global-assets-manager-app) 2. [Create a system user in Meta Business Manager](#id-2.-create-a-system-user-in-meta-business-manager) 3. [Generate a token for the Meta Business Manager system user](#id-3.-generate-a-token-for-the-meta-business-manager-system-user) 4. [Add a business hub and connect it to Meta Business Manager](#id-4.-add-a-business-hub-and-connect-it-to-meta-business-manager) 5. [Sync users, roles, and assets from Meta Business Manager to Cerby](#id-5.-sync-users-roles-and-assets-from-meta-business-manager-to-cerby) 6. [Manage unmatched users](#id-6.-manage-unmatched-users) The following sections describe each main step. ### 1. Connect your Meta Business Manager to the Global Assets Manager app To connect your Meta Business Manager to the Global Assets Manager app, you must complete the following steps: 1. Log in to your [Meta Business Manager](https://business.facebook.com/). 2. Navigate to your business portfolio. 3. Select the **Settings** option from the left navigation drawer. The **Settings** page is displayed. 4. Select the **Apps** option from the **Accounts** drop-down menu in the left pane. The **Apps** page is displayed. 5. Click the **Add** button. The **What do you want to do?** dialog box is displayed. 6. Select the **Request access to an app ID** option. The **Request an app** dialog box is displayed.

NOTE: If the How Will You Work With Cerby, Inc.? dialog box is displayed instead the Request an app dialog box, complete the following steps:

a. Select the Other option. b. Enter Security provider to help with identity and access governance in the Other input field. c. Click the Next button. The Request an app dialog box is displayed.

7. Enter **1084910789409157** in the **App ID** field. 8. Click the **Request app** button. The dialog box closes. The next step is [2. Create a system user in Meta Business Manager](#id-2.-create-a-system-user-in-meta-business-manager). ### 2. Create a system user in Meta Business Manager To create a system user with an **Admin** role in Meta Business Manager, you must complete the following steps in your Meta Business Manager: 1. Select the **System users** option from the **Users** drop-down menu in the left pane. The **System users** page is displayed.

NOTE: Meta allows having only one system user with an Admin role. If you already have a system user, you can reuse it for this configuration, so you can continue to step 6.

2. Click the **Add** button. The **Create system user** dialog box is displayed. 3. Enter a name for the system user in the **System user name** field. For example, **Cerby**. 4. Select the **Admin** option from the **System user role** drop-down menu. 5. Click the **Create system user** button. The dialog box closes, and the **Cerby** system user is displayed on the **System users** page, as shown in **Figure 1**.

Figure 1. System Users page

6. Note down the **ID** of the system user. 7. Contact the Cerby Support team via email at or through the help chat to let them know that you have requested access to the Global Assets Manager app. Also, you must share the system user **ID** with them. {% hint style="danger" %} **IMPORTANT:** Take the following into consideration: * Meta may restrict user management actions from Cerby (add, update, and remove users) for at least seven days after creating a system user. Therefore, Cerby recommends waiting seven days to start managing access to Meta Business Manager through your business hub. * You must wait until the Cerby Support team grants you access to the Global Assets Manager app to continue. On the **Apps** page, the Global Assets Manager app must change its status from “Request sent” to active with the “Cerby, Inc. owns this” message. {% endhint %} The next step is [3. Generate a token for the Meta Business Manager system user](#id-3.-generate-a-token-for-the-meta-business-manager-system-user). ### 3. Generate a token for the Meta Business Manager system user To generate a token for the Meta Business Manager system user, you must complete the following steps in your Meta Business Manager: 1. Select the **System users** option from the **Users** drop-down menu in the left pane. The **System users** page is displayed. 2. Select the system user with the **Admin** role. A collapsible pane is displayed to the right with the details of the system user. 3. Generate and copy the token by completing the following steps: 1. Click the **Generate token** button. The **Generate token** wizard is displayed on the **Select app** page, as shown in **Figure 2**.

Figure 2. Select app page of the Generate token wizard

2. Select the **Global Assets Manager** option from the **Select app** drop-down menu. 3. Click the **Next** button. The **Set expiration** page of the wizard is displayed. 4. Select the **Never** option from the **Token expiration** section. 5. Click the **Next** button. The **Assign permissions** page of the wizard is displayed. 6. Select the following options from the **Select permissions** drop-down menu: * **ads\_management** * **business\_management** * **catalog\_management** * **pages\_manage\_metadata** * **pages\_read\_engagement** * **pages\_show\_list** 7. Click the **Generate token** button. The **Done** page of the wizard is displayed with the token. 8. Click the **Copy** button to copy the token so you can save it, because you need it later. 9. Click the **Done** button. The wizard closes. 4. Assign the Global Assets Manager app to your system user by completing the following steps: 1. Select the system user with the **Admin** role for which you generated the token. 2. Click the **More options** (...) icon located at the top right of the main section. A drop-down menu is displayed. 3. Select the **Assign Assets** option from the menu. The **Select assets and assign permissions** dialog box is displayed. 4. Select the **Apps** option from the left pane. 5. Select the **Global Assets Manager** option from the middle pane. 6. Activate the **Develop app** switch from the right pane. 7. Click the **Assign assets** button. A success dialog box for the assigned assets is displayed. 8. Click the **Done** button. The dialog box closes. The next step is [4. Add a business hub and connect it to Meta Business Manager](#id-4.-add-a-business-hub-and-connect-it-to-meta-business-manager). ### 4. Add a business hub and connect it to Meta Business Manager To add a business hub and connect it to Meta Business Manager, you must complete the following steps in the Cerby web app: 1. Log in to your corresponding [Cerby](https://app.cerby.com/) workspace. 2. Select the **Business Hubs** option from the left menu. The **Business Hubs** page is displayed. 3. Click the **Connect Business Hub** button located at the top-right corner of the page. The **Connect your Business Hubs to Cerby** dialog box is displayed.

TIP: Select the Don’t show this again option to skip this step the next time you connect a new business hub.

4. Click the **Get started** button. A wizard is displayed on the **Select app** page. 5. Select **Meta Business** from the catalog. The **Enter app details** page is displayed on the wizard. 6. Enter and select your app information in the corresponding fields: * **Label in Cerby:** It is the name to assign to your business hub in Cerby, and it will be displayed on the business hub card. * **Access Token:** It is the token that you’ve previously generated in your Meta Business Manager. * **Business ID:** It is your Meta Business Manager ID. For instructions on how to find it, read the [Requirements](#requirements) section. * **App Id:** It is the ID of the Global Assets Manager app to which you requested access previously: **1084910789409157**. * **User management and login method:** It is the way your users log in to the app. You must select one of the following methods: * **Single sign-on (SSO):** Access is managed by your identity provider, and users log in with SSO authentication. * **Username and password:** Users log in by entering their Meta credentials. 7. Click the **Connect app** button. The wizard closes, and a success message box is displayed. The corresponding business hub is also displayed on the **Business Hubs** page. The next step is [5. Sync users, roles, and assets from Meta Business Manager to Cerby](#id-5.-sync-users-roles-and-assets-from-meta-business-manager-to-cerby). ### 5. Sync users, roles, and assets from Meta Business Manager to Cerby To sync users, roles, and assets from Meta Business Manager to Cerby, you must complete the following steps in the Cerby web app: 1. Select the **Business Hubs** option from the left menu. The **Business Hubs** page is displayed. 2. Click the **More options** (...) icon of the corresponding business hub card. A drop-down menu is displayed. 3. Select the **Settings** option from the menu. The business hub details page is displayed. 4. Click the **Sync** button located at the top right of the page. A message box is displayed with information about the process.

NOTE: The sync may take a few minutes depending on the number of users, and because Cerby automatically matches users to their corresponding Cerby identity.

5. Confirm that the automation job has the “Completed” status by performing any of the following actions: * Click the **More details** button from the message box. * Select the **Automation Log** option from the left menu to open the **Automation Log** page with a list of automation jobs and their status.

NOTE: Cerby automatically performs daily syncs for all business hubs, but you can trigger them manually, as described in this section. For more instructions, read the article Sync your app users with your business hub.

The next step is [6. Manage unmatched users](#id-6.-manage-unmatched-users). ### 6. Manage unmatched users During a sync, Cerby automatically matches app members to their Cerby identity, including existing [guest users](https://help.cerby.com/getting-started/concepts/user-management/guest-users), [local partners](https://help.cerby.com/getting-started/concepts/user-management/partners#h-7e4add33a2), and [native partners](https://help.cerby.com/getting-started/concepts/user-management/partners#h-e7fa9c355c). When apps don't provide email addresses or a member's app seat is associated with an email address different from their Cerby identity, Cerby assigns them the "Unmatched user" status. To verify the status of users before taking action, you must complete the following steps: 1. Select the **Business Hubs** option from the left menu. The **Business Hubs** page is displayed. 2. Click the **More options** (...) icon of the corresponding business hub card. A drop-down menu is displayed. 3. Select the **View Members** option from the menu. The business hub details page is displayed with the **Users** tab selected. Look for the "Unmatched user" value in the **Status** column of the **App users** table. For unmatched users, you can perform one of the following actions: * [Match users](#match-users) * [Remove unmatched users](#remove-unmatched-users) * [Exempt unmatched users](#exempt-unmatched-users) The following sections describe each action. #### Match users To match users, you must complete the following steps from the **Users** tab of the business hub details page: 1. Click the **More options** (...) icon of the corresponding user. A drop-down menu is displayed. 2. Select the **Match user** option from the menu. The **Match user** dialog box is displayed. 3. Enter the username or email address of the user you want to match and invite in the **Match with** field. The user is displayed on a list. 4. Select the user from the list. 5. Click the **Next** button. The **Select Cerby role** dialog box is displayed. 6. Select the role to assign to the user on the business hub **Cerby role** drop-down menu: * **Owner:** This role enables sharing access and managing business hub settings in Cerby. * **Collaborator:** This role enables only logging in to the app from Cerby. 7. Click the **Match user** button. The dialog box closes, a success message box is displayed, and the user's status changes to "Provisioned." #### Remove unmatched users To remove unmatched users, you must complete the following steps from the **Users** tab of the business hub details page: {% hint style="danger" %} **IMPORTANT:** When removing an unmatched user, Cerby performs an automation job to revoke the user’s seat and permissions in Meta Business Manager. {% endhint %} 1. Click the **More options** (...) icon of the corresponding user. A drop-down menu is displayed. 2. Select the **Remove user** option from the menu. The **Remove user?** dialog box is displayed. 3. Click the **Remove user** button. The dialog box closes, and a success message box is displayed. The user is removed from the app via an automation job. #### Exempt unmatched users Exempted users keep their user accounts or seats active in your app, but you cannot manage them through Cerby. To exempt unmatched users, you must complete the following steps from the **Users** tab of the business hub details page: 1. Click the **More options** (...) icon of the corresponding user. A drop-down menu is displayed. 2. Select the **Exempt user** option from the menu. The **Exempt user** dialog box is displayed. 3. (Optional) Enter a reason for exempting the user in the **Provide a reason** field. 4. Click the **Exempt member** button. The dialog box closes, a success message box is displayed, and the user's status changes to "Exempted." *** ## Use your business hub The following are the supported features of business hubs you can use: * [Join Meta Business Manager](/setup-and-admin/business-hubs/connecting-your-paid-social-apps/meta-business-manager/join-meta-business-manager.md) * [Add users to your app via a business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/add-users-and-teams-to-your-apps-via-a-business-hub.md) * [Provision users to your apps via an IdP and business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/provision-users-to-your-apps-via-an-idp-and-business-hub.md) * [Remove users from your app via a business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/remove-users-from-your-app-via-a-business-hub.md) * [Remove teams from your app via a business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/remove-teams-from-your-app-via-a-business-hub.md) * [Deprovision users from your apps via an IdP and business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/deprovision-users-from-your-apps-via-an-idp-and-business-hub.md) * [Update user roles in your app via a business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/update-user-roles-in-your-app-via-a-business-hub.md) * [Update user roles in your apps via an IdP and business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/update-user-roles-in-your-apps-via-an-idp-and-business-hub.md) * [Sync your app users with your business hub](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/sync-your-business-hub-with-your-external-app.md) * [Track the activity of business hub users](/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/track-activity-on-app-members-user-accounts.md) * [Remove a business hub](/setup-and-admin/business-hubs/managing-your-business-hubs/remove-a-business-hub.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://help.cerby.com/setup-and-admin/business-hubs/connecting-your-paid-social-apps/meta-business-manager/connect-a-business-hub-for-meta-business-manager.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.