Facebook overhauls page admin system, removes traditional 'Admin' role

Meta has completely overhauled its page management system in 2026, replacing the traditional 'Page Roles' system with a new Business Portfolio-based access model. The changes, which have left many page administrators confused, will become fully enforced by May 30, 2026 .

Under the new system, users can no longer invite someone directly from a page to become an admin, editor or moderator. Instead, individuals must first be added to a Business Portfolio (formerly Business Manager) before being granted access to a page. The familiar 'Admin' role has been renamed 'Full Control', while 'Moderator' and 'Editor' roles are now referred to as 'Partial Access'.

May 30 deadline: What happens if you take no action?
If page administrators do not take action before the May 30 deadline, anyone with existing access to a page will be automatically added to their Business Portfolio with Basic Access, regardless of whether the page owner wants them there.

Meta advises administrators to go to Meta Business Suite, navigate to Settings, then the People section, and review who currently has access. Those who are no longer needed should be removed immediately.

Security concerns raised
While Meta has introduced the update citing security improvements, the changes have also created new risks, according to observers.

Under the new system, anyone added through a Business Portfolio can potentially access Ads Manager, Analytics and Pixel, even if they previously only had moderator access to manage posts. This has raised concerns about increased data theft risks, as someone with Full Control could potentially take audience data and ad account information. There are also fears that if the wrong person is granted Full Control, they could potentially take ownership of the page altogether.

The changes are part of Meta's continuing efforts to centralise business asset management, but administrators are urged to review their access lists ahead of the looming deadline to prevent unwanted access to their pages and associated business tools.