Managing Permissions

Business Manager (BM) and access to Dealer pages

Before you send vehicle listings to Facebook, your Business Manager has to obtain permission access to Facebook dealers pages.

To list on Marketplace on behalf of your dealers and integrate the Messenger Chat and/or the Lead forms, you would need Standard Access permission with Publish content role. In this case, leads can be only manually downloaded from the page.

To list on Marketplace on behalf of your dealers and integrate and retrieve Messenger Chat and/or the Lead forms via API, you would need Admin Access permission with Manage Page role.

Note: if you planning to use our APIs, we recommend to create a Business Manager Admin System User under your Business manager and make sure you assign your Business Assets to it.

Standard Access to Dealer pages via BM

To request and obtain Standard Access from your Business Manager, go to Accounts > Pages. Click the button and select Request Access to Page in the dropdown.

Enter the name or URL of the Facebook page:

Select Publish content role:

Finally, once a Dealership has approved the request, assign a person from your team a Page Editor role:

Admin access to Dealer pages via BM

To request and obtain Admin Access from your Business Manager, follow the same steps as per Standard Access to Dealer pages go to Accounts > Pages, click the button and select Request Access to Page in the dropdown, enter the name or URL of the Facebook page, but make sure to select Manage Page role:

Finally, once a Dealership has approved the request, assign a person from your team a Page Editor role.

By default, only Page admins with Manage page role can access the leads. If you want to give access to dealers you can enable the customized access to leads. In this case, please make sure the dealer grant your business manager access to the leads.

Requesting access via Graph API

In order to request permissions to multiple Facebook pages in bulk, use the Business Manager API to make multiple requests.

For the following examples:

• ACCESS_TOKEN is the System User access token. You obtain it when you create the System User.
• BUSINESS_SCOPED_USER_ID is the System User business scoped ID. You can obtain it with the following request:

  cURLHTTPPHP SDKJavaScript SDKGraph API Explorer

  curl -X GET \
    -d 'access_token=<ACCESS_TOKEN>' \
    https://graph.facebook.com/{BUSINESS_ID}/system_users

  GET /{BUSINESS_ID}/system_users HTTP/1.1
  Host: graph.facebook.com

  /* PHP SDK v5.0.0 */
  /* make the API call */
  try {
    // Returns a `Facebook\FacebookResponse` object
    $response = $fb->get(
      '/{BUSINESS_ID}/system_users',
      '{access-token}'
    );
  } catch(Facebook\Exceptions\FacebookResponseException $e) {
    echo 'Graph returned an error: ' . $e->getMessage();
    exit;
  } catch(Facebook\Exceptions\FacebookSDKException $e) {
    echo 'Facebook SDK returned an error: ' . $e->getMessage();
    exit;
  }
  $graphNode = $response->getGraphNode();
  /* handle the result */

  /* make the API call */
  FB.api(
      "/{BUSINESS_ID}/system_users",
      function (response) {
        if (response && !response.error) {
          /* handle the result */
        }
      }
  );

You can now proceed to request the access to the third party pages.

1. Set up a Facebook app (https://developers.facebook.com/docs/apps/register) and claim it under your business: Business Manager > Accounts > Apps
2. Set up a Business System Admin User: Business Manager > Users > System Users
3. Generate a new token and save it. It will not be displayed again, so be sure to save it right away.
4. Use the generated token to make API calls to request Page Editor (“CONTENT_CREATOR”) permissions from dealers. Ex:
   
   cURLPHP SDKJavaScript SDKGraph API Explorer

   curl -X POST \
     -F 'page_id={PAGE_ID}' \
     -F 'permitted_tasks=[
          "CREATE_CONTENT",
          "MODERATE",
          "ADVERTISE",
          "ANALYZE"
        ]' \
     -F 'access_token=<ACCESS_TOKEN>' \
     https://graph.facebook.com/{BUSINESS_ID}/client_pages

   /* PHP SDK v5.0.0 */
   /* make the API call */
   try {
     // Returns a `Facebook\FacebookResponse` object
     $response = $fb->post(
       '/{BUSINESS_ID}/client_pages',
       array (
         'page_id' => '{PAGE_ID}',
         'permitted_tasks' => 
         array (
         0 => 'CREATE_CONTENT',
         1 => 'MODERATE',
         2 => 'ADVERTISE',
         3 => 'ANALYZE',
         ),
       ),
       '{access-token}'
     );
   } catch(Facebook\Exceptions\FacebookResponseException $e) {
     echo 'Graph returned an error: ' . $e->getMessage();
     exit;
   } catch(Facebook\Exceptions\FacebookSDKException $e) {
     echo 'Facebook SDK returned an error: ' . $e->getMessage();
     exit;
   }
   $graphNode = $response->getGraphNode();
   /* handle the result */

   /* make the API call */
   FB.api(
       "/{BUSINESS_ID}/client_pages",
       "POST",
       {
           "page_id": "{PAGE_ID}",
           "permitted_tasks": [
               "CREATE_CONTENT",
               "MODERATE",
               "ADVERTISE",
               "ANALYZE"
           ]
       },
       function (response) {
         if (response && !response.error) {
           /* handle the result */
         }
       }
   );

   At this point, you will have to wait that other page approves the request (they can do it under their business manager, under “Requests”, or directly from their page settings.)
   After the dealer's page approves the request, you will be able to make the call in the next step, otherwise you'll get an error.
5. Grant a person from your team a CONTENT_CREATOR role for that particular page. You can get the Business Scoped User ID from the “People” section of your Business Manager:
   
   cURLPHP SDKJavaScript SDKGraph API Explorer

   curl -X POST \
     -F 'user={BUSINESS_SCOPED_USER_ID}' \
     -F 'permitted_tasks=[
          "CREATE_CONTENT",
          "MODERATE",
          "ADVERTISE",
          "ANALYZE"
        ]' \
     -F 'access_token=<ACCESS_TOKEN>' \
     https://graph.facebook.com/{PAGE_ID}/assigned_users

   /* PHP SDK v5.0.0 */
   /* make the API call */
   try {
     // Returns a `Facebook\FacebookResponse` object
     $response = $fb->post(
       '/{PAGE_ID}/assigned_users',
       array (
         'user' => '{BUSINESS_SCOPED_USER_ID}',
         'permitted_tasks' => 
         array (
         0 => 'CREATE_CONTENT',
         1 => 'MODERATE',
         2 => 'ADVERTISE',
         3 => 'ANALYZE',
         ),
       ),
       '{access-token}'
     );
   } catch(Facebook\Exceptions\FacebookResponseException $e) {
     echo 'Graph returned an error: ' . $e->getMessage();
     exit;
   } catch(Facebook\Exceptions\FacebookSDKException $e) {
     echo 'Facebook SDK returned an error: ' . $e->getMessage();
     exit;
   }
   $graphNode = $response->getGraphNode();
   /* handle the result */

   /* make the API call */
   FB.api(
       "/{PAGE_ID}/assigned_users",
       "POST",
       {
           "user": "{BUSINESS_SCOPED_USER_ID}",
           "permitted_tasks": [
               "CREATE_CONTENT",
               "MODERATE",
               "ADVERTISE",
               "ANALYZE"
           ]
       },
       function (response) {
         if (response && !response.error) {
           /* handle the result */
         }
       }
   );

   Note: if the page still didn’t accept your request made in the step 4, you will get the error: “You do not have permission to perform this action. This action requires that you can MANAGE_PERMISSIONS on a managing business account. Or it requires that you can ADMINISTER on this object Note: to use do this action on behalf of a business account the "business" field must be set.”
   
   If you want to request Admin Access instead of just Content Creator, you should perform the request via API by adding `MANAGE` task in permitted_tasks as following:
   cURLPHP SDKJavaScript SDKGraph API Explorer

   curl -X POST \
     -F 'page_id={PAGE_ID}' \
     -F 'permitted_tasks=[
          "CREATE_CONTENT",
          "MODERATE",
          "ADVERTISE",
          "ANALYZE",
          "MANAGE"
        ]' \
     -F 'access_token=<ACCESS_TOKEN>' \
     https://graph.facebook.com/{BUSINESS_ID}/client_pages

   /* PHP SDK v5.0.0 */
   /* make the API call */
   try {
     // Returns a `Facebook\FacebookResponse` object
     $response = $fb->post(
       '/{BUSINESS_ID}/client_pages',
       array (
         'page_id' => '{PAGE_ID}',
         'permitted_tasks' => 
         array (
         0 => 'CREATE_CONTENT',
         1 => 'MODERATE',
         2 => 'ADVERTISE',
         3 => 'ANALYZE',
         4 => 'MANAGE',
         ),
       ),
       '{access-token}'
     );
   } catch(Facebook\Exceptions\FacebookResponseException $e) {
     echo 'Graph returned an error: ' . $e->getMessage();
     exit;
   } catch(Facebook\Exceptions\FacebookSDKException $e) {
     echo 'Facebook SDK returned an error: ' . $e->getMessage();
     exit;
   }
   $graphNode = $response->getGraphNode();
   /* handle the result */

   /* make the API call */
   FB.api(
       "/{BUSINESS_ID}/client_pages",
       "POST",
       {
           "page_id": "{PAGE_ID}",
           "permitted_tasks": [
               "CREATE_CONTENT",
               "MODERATE",
               "ADVERTISE",
               "ANALYZE",
               "MANAGE"
           ]
       },
       function (response) {
         if (response && !response.error) {
           /* handle the result */
         }
       }
   );

Dealer-side request

Once a request has been made to a Dealer, they will be able to respond from their Page Settings: