Diamond Digital Marketing Group

Category: Meta Business Suite

How to Enable 2FA in Facebook Personal Account
Facebook Personal Page

Facebook Personal Page is one of the products under the umbrella of Meta, inc product fleet. While you can easily access your Facebook Personal Page by logging in via www.facebook.com, there are many interface from different products under Meta, inc. will drive you to the interface of Facebook Personal Page, including but not limit to :
1. Facebook Ads Manager
2. Meta Business Suite
3. Facebook Business Page
4. Instagram Business Page
5. Meta For Developer
6. Meta Account Center
Infact , Facebook Personal Page is one managed under Meta Account. As long as you have created a new Facebook Personal Page, you will automatically have a Meta Account. Therefore, in your daily life conversation, Facebook Personal Page and Meta Account is used interchangeably. You can uniquely identity your Facebook Personal Page via the Facebook Profile Username.

2FA

Two-Factor Authentication (2FA) is a security process that requires two different forms of identification to access an account or system.
1. 1st Form – Login and Password
2. 2nd Form – One Time Password (OTP)
2FA Example of One Time Password from Google Authenticator

When you enable the 2FA in your Facebook Personal Page, in fact you are doing so in your Meta Account.

What Problem Patterns 2FA Solves

Protection Against Phishing

Even if someone tricks you into revealing your password through a phishing attack, they won’t be able to access your account without the second factor of authentication.

Prevent Unauthorized Access

If someone gains access to your password, 2FA acts as a barrier, preventing them from logging into your account without the second verification step
Access to Specific Capabilities

Certain features in product or service fleets under Meta , Inc. might only be available to verified accounts. For example , you are required to confirm your identity before you (i.e. Your Facebook Personal Page) can become the Meta Business Suite Admin role.

Authentication

Meta Products (e.g. Facebook Personal Page) will in the following scenario require you to authenicate yourself via 2FA even you have logged in the account:
1. When you are going to modify the security setting.
2. When you login your account via unusal device or geo location.
If you fail to authenticate yourself, your account will be blocked.

Prerequisite of Enabling 2FA in Facebook Personal Page

Before you can enable the 2FA in your Facebook Personal Page, you should
1. APP – Google Authenticator installed in your Mobile Device(s). You can enable 2FA in as many as Mobile Device you want. For details, please refer to the article Google Authenticator.
2. Make sure you have the Root access to the email that you used to register for your Facebook Personal Page.
3. You got the login and password of your Facebook Personal Page on hand.
4. Decide which Mobile Device you should use. After you have enabled the 2FA , from time to time the owner of the Mobile Device who installed the Google Authenticator would need to provide the 6-digit verification code to the requester. If the owner of the Mobile Device is also a busy boss, please make sure the request for the 6-digit verification code would not bother him. On the contrary, if it is the staff who owns the Mobile Device which installed the Google Authenticator, make sure the staff will hand over the 2FA authority when he/she leave the company.
When to Enabe 2FA in Facebook Personal Page
1. Before you want to share the Root Access (i.e. Login and Password) of your Facebook Personal Page account to others.
2. Before you are going to install the Facebook (or any Meta’s related products) into your new Mobile Device
3. Before you are going to login the Facebook Personal Page via a new laptop , or any laptop that you never used to login the account before.
4. When you newly setup a Facebook Personal Page.
5. When you are going to travel out of your country.
Step By Step – Enabling 2FA
1. Login www.facebook.com
2. Meta Account Center
3. Account settings
4. Password and security
5. Login & recovery
6. Two-factor authentication
  - Choose an account to set up two-factor authentication.¹
Check your Email

Your Facebook Security Code
1. Check your Email²
2. Code = <<Security Code via Registering Email>>
3. Password = <<Facebook Personal Page Password>>
Please Reenter Your Password
1. Choose your security method = Authentication app
2. Next
3. Open Google Authenticator APP by your mobile device
  - Scan a QR Code.³
Instructions For Setup 2FA in Facebook
1. Get the 6-Digit One Time Code in Google Authenticator APP.
Google Authenticator For Facebook
1. Enter code⁴
Get your code from your authenticator app
1. Code⁵
Check your Email
1. Continue
2. Password⁶
3. Done
Two factor authentication is on
1. Only if you have more than 1 Meta Account registered via the same Email Address ↩︎
2. Check the Email you used to register for your Facebook Personal Page ↩︎
3. Please copy and store the Key to a safe place only you can access. For example, your Zoho Vault account. ↩︎
4. Please be reminded that each code will only be alive within 30 seconds. ↩︎
5. Code will send to your registering email again (i.e. 2nd time) ↩︎
6. Password of your Facebook Personal Page will be required again (i..e 2nd time) ↩︎
January 12, 2025
Add Another Admin in your Meta Business Suite Account

As an Asignor (Existing Business Admin)

As an Assignee (New Business Admin)

youve been invitied to join

Review business portfolio information

October 12, 2024
Add a New Partner to the Business Portfolio of your Meta Business Suite
Definition

Meta Business Suite

Meta Business Suite (or formerly known as Facebook Business Suite) is a comprehensive Meta assets management tool designed to help businesses manage their activities under Meta Platforms, Inc. including Facebook, Instagram, Whatsapp Business and Meta Messenger from a single platform.

How Meta Business Suite Interface Look Like

Business Portfolio

One Meta Business Suite can have many (i.e. One to Many relationship) Business Portfolio because a company can have more than 1 business name or business line which all put together under 1 single Meta Business Suite Account. The Business Portfolio is simply the unit which differentiate different business name or business line under the same Meta Business Suite.

In the case of an digital marketing agency, as an digital marketing agency always help more than 1 client to manage their Meta Assets, and therefore each client’s Meta Assets will be differentiated with a separated Business Portfolios , which all these Business Portfolios from different clients can all put under 1 Meta Business Suite account of a digital marketing agency.

Partner

Partner is an entity, such as an agency or another business, that you grant access to your Meta Assets within your Business Portfolio. This can include your Facebook Page, Instagram account, ad accounts, Whatsapp Business Account and more. By adding a partner, you can collaborate with them on managing your social media presence, running ad campaigns, and analyzing performance.

Also be reminded that the Partner in here is totally different and concept – Meta Business Partner , which is literally the real business partner of the Meta, Inc.

Add a New Partner

To be precise , when you are pressing the Add a new partner button inside the Meta Business Suite interface, you are in fact adding a Partner (e.g. your appointed Digital Marketing Agency) into your Business Portfolio, while the term Partner is referring to a Business Portfolio Account which is unique identified by a Business ID, implying that you are NOT adding the Facebook Business Page of your appointed Digital Marketing Agency as your Partner, nor are you inviting individual Facebook Personal Account (People) owned by the staff of your appointed Digital Marketing Agency to manage your Business Portfolio Account.

Your Business Portfolio can add as many Partners as you like to manage particularly different Meta Assets.

Below is the Meta Business Suite Partner Business Portfolio Chart Extract (Figure 1) which in large extend simplifies the hierarchical relationship between your and Partner’s Business Portfolio Account.

(Figure 1) Meta Business Suite Partner Business Portfolio Chart Extract

Use Case – When to Add a New Partner

As a Business Owner

Assign Access Rights to your Digital Marketing Agency

It is straight forward that when you as a business owner , after you have appointed an Digital Marekting Agency, you will need to assign the Access Rights of different kinds of Meta Assets , including Facebook Business Page and Meta Ads Account , to the Digital Marketing Agency so that they can mange the Meta Assets on behalf of you.

What Problem Patterns the Adding a New Partner solves

Comparsion between Adding a New Partner and Inviting a People

As mentioned in the Article Invite people to the Business Portfolio of your Meta Business Suite that as a Business Owner, you can always directly assign the access rights of your Meta Assets by inviting a People (i.e. an individual person, probably the staff of the appointed Digital Marketing Agency) to manage your Meta Assets on behalf of you.

However, there may be some down side while you are taking the way in above, due to the fact that:

Extra workload when People is onboard / quit

Imagine every time when your appointed Digital Marketing Agency hires a new staff , which on the flip of coin means that an existing staff is going to quit, you as the Business Owner , need to both invite a new Person and remove the access rights of the going-to-quit staff from your Business Portfolio, not to mention that you probably have to invite the staff of your appointed Digital Marketing Agency coming from I.T , marketing and creative design team.

Instead of inviting them one by one , you can directly and simply add the appointed Digital Marketing Agency as a new Partner only for one time. And all the human resource turnover will not be your problem because the workload of linking up the Business Portfolio to the People (i.e. staff) will be shifted to your appointed Digital Marketing Agency.

Sophisticated Matrix among Permission Level, People and Meta Assets

Think about the Matrix in below which highly reflects the reality in your Business Portfolio:

People involved
2. Marketer
3. Designer
4. Data Analyst
5. Finance
6. I.T Guy
Access Rights Permission Level
1. Full Control
2. Partial Control
Meta Assets
1. Facebook Business Page
2. Instagram Business Page
3. Whatsapp Businesss Account
4. Dataset (Pixel)
5. Domain
6. Meta Ads Account
In reality like the above Role-based Access Control example, you may not realise that you finally may need to take (6 * 2 * 6) = 72 actions during your Access Rights assignment exercise, not to mention that the turnover of the People.

Account Quality of the Facebook Personal Page of the People

With a bit of luck, you may not realise that if the Facebook Personal Page of the People whom you assigned him/her Full Control access rights of your Business Portfolio, whenever that Facebook Personal Page is restricted by any reason, outstanding ads bill balance for example, the Business Portfolio which under he/she control (i.e. your Business Portfolio) will also be restricted.

By Add a Partner instead of inviting individual People to manage your Business Portfolio, you can avoid this risk exposure.

Prerequisite of Add a New Partner

Before you can add a New Partner to manage your Business Portfolio, following items should be prepared:

For the Target New Partner:
1. The 16-Digit Business ID (of its Business Portfolio)
2. The Registering Email which is used to create the Meta Business Suite account which contains the target Business Portfolio.
  - Make sure the Target New Partner is ready to login the Registering Email address without any hiccup. (e.g. Lost password, 2FA device missing and e.t.c.)
For the Business Owner and Meta Business Account Owner who want to Add a New Partner:
1. Email Address (i.e. Registering Email Address) which is used to register the Meta Business Suite Account which contains the Business Portfolio that you want to share should be ready. This is due to the fact that in case (quite often) you want to assign the Full Control (i.e. highest) access rights level the Partner, Meta Business Suite will require you to verify your (i.e. owner) Registering Email Address before you can successfully assign by sending you the verification email to your Registering Email Address.
2. Login of the Facebook Personal Page
  - By accessing the Meta Business Suite interface, you should have logged the Facebook Personal Page which has the Full Control of the Business Portfolio that you want to share.
  - Be alert that thanks to ex-staff you may have many Meta Business Suite ,many Facebook Personal Page and many Business Portfolio , no matter you know or not know their existence. Therefore, before sharing the Business Portfolio to the Partner, make sure the Business Portfolio you are going to share is the one which is linked up with the underlying Meta Assets that you want your New Partner to manage on behalf of you.
3. Suggestions from New Partner which Meta Assets you want to share.
  - The only shortcoming to adding new Partner (instead of inviting individual People to manage your Business Portfolio) is that you need to share each Meta Assets to the Partner one by one, which means that you cannot simply share the Full Control to your appointed Digital Marketing Agency and let them assign the Meta Assets by themselves. Therefore, you can suggest your appointed Digital Marketing Agency to prepare in advance a sharing list before you sit in front of the computer to do the operation.
  - In most cases, you may realise at the last minute that the Meta Assets that you want to share to your appointed Digital Marketing Agency in fact do not exist. Therefore, having the Meta Assets list in advance will avoid this embarrassment.
4. Ownership lists of the Meta Assets
  - As mentioned in the #3 in the previous paragraph, very often the Meta Assets that you want to share to your Partner may even not exist. For example, you may not realise that you need to have a Meta Assets of Dataset (Pixel) or Meta Ads Account. Especially in the rush of the deadline of your project, your Partner may not be able to wait for you to create the Dataset (Pixel) or Meta Ads Account for you, which in turn they will create their own and everything just works fine! Until the day you cease working with your Partner , all the Meta Assets will be broken which you may probably need to rebuild again. And therefore, to own the Meta Assets are always the 1st priority of running a social media account.
Step by Step Guideline on how to Invite People

Steps For Business Owner
1. Login facebook.com by the Email Address which you have the Full Control of the managing the Business Portfolio that you are going to share to your Partner.
2. Browser¹ > + (New Tab)
3. business.facebook.com/latest /settings/business_info/²
4. Partners > Add ▼ > Give a partner access to your assets
5. Add a new partner > Enter Partner Business IDⓘ³ > Next
6. Select assets and assign permissions > Select asset type > Select assets⁴ > Assign permissions > Full control (business tools and Facebook) > Everything > Assign assets⁵
7. Assets assigned
Select assets and assign permissions Assets assigned
1. business.facebook.com/latest/ settings/business_info > Users > Partners
Show New Partner In Business Portfolio After Assigned In Meta Business Suite

Steps For Assignee (Assigned New Partner)
1. Step#8 in Steps For Business Owner completed
2. Login <<PARTNER_REGISTERING_EMAIL>>
3. Email Title = You can work on a new page on Business Manager from [email protected]
4. Visit Business Manager > Partners
You can work on a new page on Business Manager

Steps For Buiness Owner to modify the Access Rights in the future

It is likely the case that you may not assign all the Meta Assets to your Partner in one shot. No worry and you can always add/remove Assets by:
1. business.facebook.com/latest/settings/business_info > Users > Partners
2. Details > Assets you shared > Assigned assets
3. <<ASSIGNED_META_ASSETS>> > Manage
1. Should be the same Browser used in Step#1 ↩︎
2. Check whether the business_id found in the URL of the address bar in the browser is the Business ID you want to share to your Partner to manage ↩︎
3. Request the 16-Digit Business ID from your Partner. For example, 1787800488180171 ↩︎
4. You should at least choose one asset before you can add a Partner. Please ask your Partner to provide the lists of Meta Assets assignment beforehand. ↩︎
5. You can either apply the the principle of least privilege (PoLP) or bear the cost of spending time to take care of the permission requests every time in the future. Make sure you understand the benefit and risks of your actions. ↩︎
October 4, 2024
Invite people to the Business Portfolio of your Meta Business Suite
Definition

Meta Business Suite

Meta Business Suite (or formerly known as Facebook Business Suite) is a comprehensive Meta assets management tool designed to help businesses manage their activities under Meta Platforms, Inc. including Facebook, Instagram, Whatsapp Business and Meta Messenger from a single platform.

Business Portfolio

One Meta Business Suite can have many (i.e. One to Many relationship) Business Portfolio because a company can have more than 1 business name or business line which all put together under 1 single Meta Business Suite Account. The Business Portfolio is simply the unit which differentiate which different business name or business line under the same Meta Business Suite.

In the case of an digital marketing agency, as an digital marketing agency always help more than 1 client to manage their Meta Assets, and therefore each client’s Meta Assets will be differentiated with a separated Business Portfolios , which all these Business Portfolios from different clients can all put under 1 Meta Business Suite account of a digital marketing agency.

People

Rather than referring to a biological human being, the term “People” here is more , to be precise, referring to a Facebook Person Account, due to the fact that 1 biological human being can possess more than 1 Facebook Person Account.

Meta Business Suite Assets Chart Extract (Figure 1)

Invite People

The Invite People button inside the Meta Business Suite interface is fact referring to inviting a Facebook Personal Page account (i.e People) to manage a Business Portfolio , and all the assets under this Business Porfolio if applicable, by assigning a specific level of permission to that Facebook Personal Page (i.e. People)

Use Case – When to Invite People

As a Business Owner

Assign Access Rights to your internal staff

It is straight forward that when you as a business owner want to ask your internal staff to manage the Business Portfolio of your own company, you should assign the appropriate level of access rights to that staff.

Assign Access Rights to the staff of a Digital Marketing Agency individually

While in some situation that your Digital Marketing Agency never ever used Meta Business Suite to manage the Business Portfolio to it’s client, or somehow the Meta Business Suite of that Digital Marketing Agency is out of order, instead of assign the access rights to the Business Portfolio of that Digital Marketing Agency as a Partner, you may need to assign the access rights directly to the People (i.e. the Facebook Person Page of a specific Person).

As a Digital Marketing Agency

If you want your staff to manage the Business Portfolio of your clients, instead of asking the client to directly assign access rights to your staff, your client should first assign access rights to your Business Portfolio as a Partner, and then you use the Business Portfolio of your Digital Marketing Agency to assign access rights to your staff

Negative Use Case – When NOT to Invite People

As a Business Owner, if you have appointed a Digital Marketing Agency to manage the Meta Assets on behalf of you, instead of directly assigning the access rights of your Business Portfolio to the staff of your Digital Marketing Agency personally, it is strongly recommended you to assign the access rights to the Business Portfolio of your Digital Marketing Agency as a Partner, due to the reasons below:
1. In case that the staff of your Digital Marketing Agency quit and a new comer is on board, if you assign the access rights of your Business Portfolio directly to a “People“, you may need to from time to time take care of the Invite People tasks, which is more complicated than you can imagine. If you in the very beginning assign access rights to the Business Portfolio of your Digital Marketing Agency as a Partner, you no longer need to take care of the Invite People steps which all these steps will be taken care by your Digital Marketing Agency.
2. While the quality of the Facebook Personal Account (i.e. the People) will also directly affect the account quality of your Meta Business Suite account. In case the Facebook Personal Account of the staff of the Digital Marketing Agency which you had appointed is blocked or restricted, your Business Portfolio may also be affected, which at worst is that your Business Portfolio is also being restricted.
Prerequisite of Inviting People

Before you can invite a People to manage your Business Portfolio, following items should be prepared:

For the Target Facebook Personal Account:
1. The Email Address (i.e. Registering Email Address) which is used to register for the Target Facebook Personal Account (i.e. Invitee) should be ready, which means that Person should test out the Credential of that Email Address, while the Credential of the Email Address means:
  - Login : most of the time the login of the Email Address will be same as the Email Address
  - Login URL : In some case (which is quite common) which the Registering Email Address is a Company Domain Email (e.g. [email protected]) instead of a Gmail or Hotmail account, it may have a chance that the Registering Email Address may no longer be valid due to the fact that the underlying domain of that Company Domain Email is already expired.
  - Password: It is easy to understand that you need to have a Password to login any application.
  - 2FA^ⓘ : It is not rare that the Email Address account , on top of simply providing Login and Password, it will also request the user to have an additional way to authenticate during the login, which include any 6-Digital One-Time Password (OTP) (See Figure 2) sent to your recovering Mobile Phone Number, or an Mobile Prompt which need you to tap 1 of the 3 numbers shown in your mobile device to match with the same number shown in the login procedures.
  - Recovery Mobile Phone Number ready to receive SMS : As mentioned in previous 2FA paragraph, in case the login procedure of the Registering Email Address requires a OTP 6-digit code from your Recovery Mobile Phone Number, please make sure that that Mobile Phone Number is still valid and can receive SMS.
For the Business Owner and Meta Business Account Owner who want to Invite People:
1. Email Address (i.e. Registering Email Address) which is used to register the Meta Business Suite Account of the Inviter should be ready. This is due to the fact that , in case (quite often) you want to assign the Full Control (i.e. highest) access rights level to a People, Meta Business Suite will require you to verify your (i.e. Inviter) Registering Email Address before you can successfully assign. Please refer to the previous session “For the Target Facebook Personal Account:” in order to take care the consideration of the Registering Email Address.
2. The Business Portfolio Name and Business ID which you want to assign permission to the invitee. Although intuitively it is quite an easy criteria to fulfill, it is one of the most fatal errors for the entire Digital Marketing Life which people would have suffered, due to the fact that:
  - Buisness owner may have more than one Meta Business Suite account, thanks to the ex-staff which quit the job without handing over the relevant login and password information.
  - Business owners may have more than one Business Portfolio, for example, one Business Portfolio per branch or per country or per brand. Please understand that most of the time the Name of the Business Portfolio is not unique enough for the invitee to differentiate whether this is a relevant one. Even worse, the invitee with short history in the company, can never realize that there is an other Business Portfolio with same or very similar name existed in the same company.
  - In many situations the Business Owner may have more than 1 Meta Ads account and Meta Pixels. If the main purpose of inviting People is to assign the invitee the access rights of a particular Meta Ads account or Meta Pixels (or any other assets), the invitee (i.e. you) should figure out which particular Business Portfolio is linked to the Meta Assets that you want to assign access rights to the invitee.
Step by Step Guideline on how to Invite People

Steps For Inviter
1. Login facebook.com by the Email Address which you can manage the Meta Business Suite.
2. Browser¹ > + (New Tab)
3. business.facebook.com/latest/settings/business_users/²
4. + Invite People
5. Insert Email address³
6. Assign access > Full control > Everything⁴ > Manage > Next
7. Assign business assets > Select asset type > Select assets⁵ > Assign permissions > Full control (business tools and Facebook) > Everything > Next⁶
8. Review invitation > Send invitation
9. Almost done > Verify Email > Confirm email address⁷
10. Send email⁸
11. Login your <<REGISTERING_EMAIL_ADDRESS>>
  - For Gmail , check Social categories.
12. Found Email Title = Verify your business email from [email protected]
13. Meta Business Suite⁹ > Enter confirmation code > << 6-DIGIT_CONFIRMATION_CODE >>¹⁰ > Submit
Steps For Invitee
1. Login <<REGISTERING_EMAIL_ADDRESS>>
2. Email Title = You've been invited to join <<BUSINESS_PORTFOLIO_NAME>> business portfolio on Meta Business Suite from [email protected]
3. Get started¹¹
4. Business portfolio info > Accounts > Pages > <<FACEBOOK_BUSINESS_PAGE_NAME>> > View on Facebook
1. Should be the same Browser used in Step#1 ↩︎
2. Check whether the business_id found in the URL of the address bar in the browser is the Business ID you want to invite the People to manage ↩︎
3. Email Address of the Invitee which is used to register for his/her Facebook Personal Account ↩︎
4. According to the principle of least privilege (PoLP) , instead of in the very beginning assigning the highest permission level to the Invitee, you can instead assign the least level of permission to the invitee, and let him/her request you to grant him a higher level of permission only when necessary. While this can harden the security of your Meta assets, it also generates a certain workload which you always need to cater the permission requests from different People. Besides, you may need some extra time to figure out which particular piece of access rights is related to the task which the Invitee wants to complete. ↩︎
5. You should at least choose one asset before you can invite People. ↩︎
6. Same as Footnotes 4, you can either apply the the principle of least privilege (PoLP) or bear the cost of spending time to take care of the permission requests every time. Make sure you understand the benefit and risks of your actions. ↩︎
7. Please play attention that the Email Address you , as an invitee , are going to verify is the Registering Email Address that you used to register for your Meta Business Suite account (i.e. NOT invitee’s Email Address). You are going to verify the Email Address which is owned by your and not the Invitee. ↩︎
8. Please pay extra attention that the Send email button is not always functional. Sometimes the button will be freeze after you click. Although you can still receive the verification email in your Registering Email Address, due to the fact that the Send email button is freeze, you are not able to insert the verification code found in the verification email, which force you to abort the task by clicking the x in the right top corner of the pop-up modal. ↩︎
9. Same interface in step#10 ↩︎
10. Found the 6-digit verification code in Step#12 ↩︎
11. In case it failed to bring you to the destination, you (the invitee) can direction visit https://business.facebook.com/latest/settings/pages ↩︎
October 3, 2024