Why this matters
Wrong permissions cause both security risk (too much access) and friction (too little). A clean role map keeps the account auditable.
Step-by-step instructions
1
Business Settings → People
Click "Add" and enter the colleague email.
Screenshot placeholder - step 1
2
Choose role
Employee for day-to-day use; Admin only for senior owners.
Screenshot placeholder - step 2
3
Assign assets
Tick the ad accounts, Pages and pixels they need and set per-asset access.
Screenshot placeholder - step 3
4
Send invite
The person accepts via email and 2FA.
Screenshot placeholder - step 4
5
Confirm in People tab
Status changes from Pending to Active.
Screenshot placeholder - step 5
Pro tips
- Enforce 2FA on all admins.
- Least privilege by default - upgrade on demand.
- Remove leavers same-day.
Common mistakes
- Making everyone an Admin.
- Forgetting to remove ex-employees.
- Using shared generic emails.
What happens next
Your team is properly scoped and the business is audit-ready.