Meta pulls everyone into your business portfolio on 14 October
Facebook is emailing operators: everyone who works on your Pages will be added to your business portfolio automatically after 14 October 2026. What basic access grants, what becomes visible to the people in it, and why for a network of many pages this widens the blast radius of a single ban.
Short answer
Meta is emailing operators: everyone who works on your Pages will be added to your business portfolio. The window is thirty days, and the date in the email is 14 October 2026.
Do nothing and they get added automatically, with basic access.
Officially this is about convenience: “to manage your team more efficiently and make your Pages more secure.” In practice, everyone who ever got access to your Pages ends up in one list. Including the ones who no longer need it.
There is exactly one action, and it has a deadline: open People in Settings and clear out whoever should not be there, before 14 October. After that date they join the portfolio on their own.
What the email actually says
The wording:
To manage your team more efficiently and make your Pages more secure, we’re adding people who work on your Pages to your portfolio in 30 days.
Go to People in Settings to review and add team members now, or remove access to Pages for those who no longer need it. If you don’t take action, these people will be added to your portfolio with basic access after October 14, 2026.
Note the order inside the email itself: removing access comes first, adding second. Meta is effectively warning you that your Pages currently carry people you have forgotten about.
A portfolio is not Page permissions
The distinction that causes the confusion.
Page permissions are access to a single object: admin, editor or moderator of one Page.
A business portfolio is a container that gathers Pages, Instagram accounts, ad accounts and people in one place. Per Meta’s guidance, a portfolio “allows organizations to manage the access and permissions of people who work on these assets.”
So where you previously handed out access one Page at a time, all of those handouts now consolidate into a single register.
What basic access grants
Meta Business Suite has two levels: full control and partial access.
Basic access is the partial one, and it is the default. Per the guidance, people with basic access:
- work only on the assets they have been assigned;
- can see who has full control of the portfolio.
The former name of this role was “employee.” The former name of full control was “business admin.”
Full control is everything else: portfolio settings, people, tools, assets. Such a person can claim or remove assets and people, manage access shared with partner businesses, see every asset in the portfolio, and delete the portfolio itself.
The gap between the two levels is the gap between “works with what they were given” and “can take it all.”
What becomes visible
A point the email says nothing about, while the guidance states it outright:
When people join a business portfolio, their name, work email address and the business assets they’re assigned will be visible to people with full control of the portfolio and to the people with full control of the assigned assets.
And in the other direction: basic access can see who holds full control. So after 14 October every editor sees who the owner is.
For an agency that is normal. For a network where different people run different Pages without knowing about one another, it is a change of configuration.
The portfolio overrides Page permissions
One line from the guidance worth reading twice:
Business portfolio permissions override all others.
Which means that after the move, the level in the portfolio is what counts — not whatever you once configured on the Page. Permissions handed out one at a time stop being the source of truth.
WHAT IT CHANGES
The control point for access moves, and it moves on its own
Until now access lived at Page level: granted, revoked, forgotten. Now it lives at portfolio level, and it will move there without your involvement — with a date attached, but not with your decision. The only window where the decision is still yours closes on 14 October.Why this matters for a network
For one Page with two people the change is cosmetic. For a network it is not.
A shared blast radius. Our own community documented a case where the mistaken actions of a single moderator got several business Pages blocked — along with their moderators and admins. When every link is consolidated into one register, that chain becomes shorter and more obvious to the system.
It runs against standard operator practice. From the same community: the profile will eventually go down, it is a consumable, so keep the Pages across several backup profiles with admin rights. The point is that one banned profile should not take everything. Consolidating people into one portfolio works in precisely the opposite direction.
We are not claiming the portfolio raises the chance of a ban — there is no data for that. The point is different: it raises the cost of one, because the links between assets become explicit.
Interns, contractors, former colleagues. Anyone who was granted access and never removed will land in the list. That is the real reason to open the settings now: not to add someone, but to see who is in there at all.
What to do before 14 October
- Open People. Meta Business Suite → Settings → People. If the section is not there, you do not have full control — see below.
- Read the list top to bottom. The task is not to add, it is to find out who is there. Former editors, one-off contractors, acquaintances given access “for a minute.”
- Remove Page access from anyone who does not need it. Page access specifically — then they never enter the portfolio.
- Add the rest yourself, by hand, at the minimum level. Basic access is already the lowest working level, but assign only the assets the person actually needs.
- Full control for you alone, plus one trusted person if you must. That level can delete the portfolio outright.
- Turn on two-factor authentication. The guidance recommends it inside the very section on adding people, and once everyone sits in one register the cost of a compromise is higher.
If you do not have full control
This happens more often than you would think: the portfolio was created long ago, the person with full control left, and the Pages carry on working.
The sign is that Settings shows no People section. You cannot manage access, and 14 October arrives regardless.
Meta has a separate procedure for requesting full control of a portfolio when nobody in the organisation holds it. Start it now rather than in October: it takes time, and the window is closing.
The email reached us too. As 14 October approaches we will keep updating this analysis — particularly with what happens to those who do nothing.
WHICH CASE IS YOURS
- The email arrived and you plan to do nothing — people get added on 14 October, with basic access.
- No People section in Settings — you lack full control of the portfolio; request it now.
- There are strangers in the list — that is Page access granted once and forgotten.
- An editor can see the owner — that is how basic access works: it sees who holds full control.
- Page and portfolio permissions disagree — the portfolio is what counts.
None of these fit? Send a screenshot — ok@contentmonetizing.com