Summary and recommendation
Meta Ads user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.
Meta Ads user management operates through Meta Business Suite at business.facebook.com/settings/people.
Access is structured as a two-tier model: a Business Manager role (Admin or Employee) controls membership in the Business Manager itself, while separate asset-level roles (Ad Account Admin, Advertiser, Analyst) control what a person can actually do within each ad account, Page, or pixel.
Unlike every app that charges per seat and creates offboarding urgency through cost, Meta Ads is free per user
but the two tiers are fully independent, meaning adding someone to the Business Manager grants no asset access until they are explicitly assigned to each asset.
Quick facts
| Admin console path | Meta Business Suite → Settings → People (Business Settings > People & Assets > People) |
| Admin console URL | Official docs |
| SCIM available | Yes |
| SCIM tier required | Free (via Meta Work Accounts) |
| SSO prerequisite | No |
User types and roles
| Role | Permissions | Cannot do | Plan required | Seat cost | Watch out for |
|---|---|---|---|---|---|
| Business Manager Admin | Full control of Business Manager: add/remove people, assign roles, manage all assets (ad accounts, Pages, pixels), manage payment methods, view all billing, create and edit all campaigns. | Cannot act on assets they have not been explicitly assigned to unless they assign themselves first. | Free (Business Manager access is free) | No per-seat cost; ad spend is the only cost. | There must always be at least one Admin on a Business Manager; the last Admin cannot be removed. |
| Business Manager Employee | Can be assigned to specific assets (ad accounts, Pages, etc.) by an Admin. Within assigned assets, permissions depend on the asset-level role granted. | Cannot add or remove people, cannot manage Business Manager settings, cannot view assets they have not been assigned to, cannot manage payment methods. | Free | No per-seat cost. | Employees must be assigned to individual assets separately after being added to the Business Manager; adding them to the Business Manager alone grants no asset access. |
| Ad Account Admin | Full control of the ad account: create/edit/delete campaigns, manage billing, add/remove ad account users, view reports. | Cannot manage Business Manager-level settings unless also a Business Manager Admin. | Free | No per-seat cost. | Ad account Admin role is assigned at the asset level, separate from Business Manager role. |
| Ad Account Advertiser | Create and edit ads, access Ads Manager, view billing. | Cannot manage ad account users, cannot edit payment methods. | Free | No per-seat cost. | |
| Ad Account Analyst | View ad performance and reports only. | Cannot create or edit ads, cannot manage billing or users. | Free | No per-seat cost. |
Permission model
- Model type: hybrid
- Description: Two-tier model: Business Manager-level roles (Admin or Employee) control access to the Business Manager itself, while asset-level roles (Ad Account Admin, Advertiser, Analyst; Page Admin, Editor, etc.) control what a person can do within each specific asset. An Employee must be explicitly assigned to each asset with an asset-level role.
- Custom roles: No
- Custom roles plan: Not documented
- Granularity: Asset-level role assignment per ad account, Page, pixel, catalog, and other assets. No custom role creation; roles are fixed by Meta.
How to add users
- Go to business.facebook.com/settings/people.
- Click 'Add People' (or 'Invite People').
- Enter the person's work email address.
- Select their Business Manager role: Admin or Employee.
- Click 'Next'.
- Optionally assign them to specific assets (ad accounts, Pages, etc.) and select the asset-level role for each.
- Click 'Invite'. The person receives an email invitation and must accept it to gain access.
Required fields: Work email address of the invitee, Business Manager role (Admin or Employee)
Watch out for:
- The invitee must have or create a personal Facebook account to accept the invitation; Meta Work Accounts (without a personal Facebook account) are available in some regions but not universally.
- Invitations expire if not accepted; a new invitation must be sent.
- Asset assignments are optional at invite time but must be completed before the user can work on any ad account.
- A person can only be added to a Business Manager once; if they are already a member, you assign them to additional assets instead of re-inviting.
- Users added as partners (external agencies) use a different flow (Partners section) and are not listed under People.
| Bulk option | Availability | Notes |
|---|---|---|
| CSV import | No | Not documented |
| Domain whitelisting | No | Automatic domain-based user add |
| IdP provisioning | No | Not documented |
How to remove or deactivate users
- Can delete users: Yes
- Delete/deactivate behavior: Meta Business Manager allows an Admin to remove a person from the Business Manager entirely. Removing a person revokes their access to all assets within that Business Manager. The action is described as 'Remove' in the UI. The removed person's Facebook account is not deleted; only their Business Manager membership and associated asset access are revoked.
- Go to business.facebook.com/settings/people.
- Locate the person in the People list.
- Click on their name to open their profile.
- Click 'Remove Person' (or select the three-dot menu and choose 'Remove').
- Confirm the removal in the dialog.
| Data impact | Behavior |
|---|---|
| Owned records | Campaigns, ads, and other assets created by the removed user remain in the ad account and are not deleted. Ownership of those assets stays with the Business Manager/ad account. |
| Shared content | The removed person loses access to all Pages, ad accounts, pixels, and other assets they were assigned to within that Business Manager. |
| Integrations | Any API access tokens issued to the removed user for Business Manager assets are invalidated upon removal. |
| License freed | No paid seat or license is associated with users; removal has no billing impact beyond the user no longer being able to spend on the ad account. |
Watch out for:
- You cannot remove the last Admin from a Business Manager; another Admin must be assigned first.
- Removing a person does not cancel any active campaigns they created; those continue to run and accrue spend.
- If the person was the sole Admin of an ad account within the Business Manager, an Admin should reassign that role before removal.
- Removed users can be re-invited later using the standard invite flow.
License and seat management
| Seat type | Includes | Cost |
|---|---|---|
| Business Manager access | Access to Meta Business Suite, Ads Manager, and assigned assets. No per-seat fee. | Free; costs are based on ad spend only. |
- Where to check usage: business.facebook.com/settings/people - lists all current members and their assigned assets.
- How to identify unused seats: Review the People list at business.facebook.com/settings/people. There is no built-in 'last login' or activity report for Business Manager members in the standard UI. Admins must manually review asset assignments and cross-reference with team activity.
- Billing notes: Meta Ads has no per-user or per-seat licensing fees. All costs are pay-per-click or pay-per-impression ad spend. Payment methods are managed under Business Settings → Billing & Payments (business.facebook.com/settings/billing).
The cost of manual management
Meta Ads has no per-seat or per-user licensing fees. An employee removed from your organization but left active in Business Manager retains full visibility into ad spend, audience data, and campaign performance across every ad account they were assigned to. Active campaigns created by a removed user continue to run and accrue spend after removal;
there is no automatic pause. Admins must manually cross-reference the People list against team rosters because the standard UI exposes no last-login timestamp or activity report.
What IT admins are saying
Community evidence is not specific enough to quote or summarize yet for this app.
The decision
Manual management of Meta Ads access is workable for small teams with a single Business Manager and a handful of ad accounts.
Consider that every app in your environment touching ad data - Meta Ads included - needs a defined offboarding checklist, because the platform will not surface inactive users, will not pause campaigns on removal, and will not alert you when an invitation goes unaccepted.
The last Admin constraint means offboarding an Admin requires a role reassignment step before removal, and asset assignments must be completed individually per ad account after every invite. Teams managing multiple Business Managers or frequent contractor access should treat the People list as a recurring audit item.
Bottom line
Meta Ads access management is free and functional but manual by design.
Every app in your environment that touches ad data needs a defined offboarding process, and Meta Ads is no exception - the platform will not surface inactive users, will not pause campaigns on removal, and will not flag unaccepted invitations.
The two-tier role model requires deliberate asset assignment after every invite; skipping that step is the single most common cause of access confusion reported by Admins.
Automate Meta Ads workflows without one-off scripts
Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.
