If you manage Facebook ad campaigns for more than one brand, or you're spending real budget every month, a personal ad account stops being enough fairly quickly. That's where Facebook Business Manager (BM) comes in. It's the control center for your pages, ad accounts, pixels, and team access — but most advertisers only think about it when something goes wrong. The tips below come from patterns we see over and over across real Business Manager accounts, and they apply whether you're running your own BM or managing one on behalf of clients.
Why Business Manager Hygiene Deserves as Much Attention as Your Ad Creative
It's easy to spend hours refining an ad's copy and creative, then set up the Business Manager holding it in five rushed minutes. That imbalance is exactly how accounts end up restricted, ownership disputes happen, or a single compromised login takes down every ad account attached to it. A Business Manager isn't just a settings page — it's infrastructure. Treating it that way, with the same care you'd give a server or a payment system, is what separates advertisers who scale smoothly from those who are constantly rebuilding after a ban.
Foundation: Get These Basics Right From Day One
Verify Your Business Before You Actually Need To
Meta's business verification process confirms your legal business name, address, and often your domain against official documentation. Many advertisers put this off until they hit a limit or a review request forces their hand — usually at the worst possible time, mid-campaign. Completing verification early, while nothing is urgent, means it's already done by the time it actually matters for ad account limits or trust signals.
Use a Dedicated Business Email and Domain
A Business Manager tied to a personal Gmail address and a domain used for ten unrelated projects sends mixed signals during any review. Where possible, use a business email on your own verified domain as the primary contact for the BM. It's a small detail, but it's one of the easiest ways to make your setup look — and be — more legitimate.
Turn On Two-Factor Authentication for Every Admin
A Business Manager is only as secure as its least protected admin login. Two-factor authentication should be non-negotiable for every person with admin access, not just the owner. Most account takeovers that cascade into frozen ad accounts and lost budget start with a single password that wasn't protected by anything else.
Access Control: Who Can Touch Your Business Manager
Follow the Principle of Least Privilege
Not everyone who touches your ads needs full admin rights. Meta's role system lets you separate page management, ad account access, and admin control — use it. A freelancer who only needs to upload creative shouldn't have the same access as your in-house media buyer. The fewer people with full control, the smaller your blast radius if one login is compromised.
Audit Partner and Agency Access on a Schedule
It's common for a Business Manager to accumulate partner access from agencies, freelancers, and tools over months or years — many of which stopped being relevant a long time ago. Set a recurring reminder, monthly or quarterly, to review every partner and every person with access and ask whether they still need it. Old, forgotten access is one of the most overlooked security gaps in ad accounts.
Remove Former Employees and Vendors the Same Day
When someone leaves your team or a contract ends, their Business Manager access should be removed the same day, not whenever someone remembers to do it. This isn't just a security best practice — it's also what keeps your asset ownership clean if a dispute ever comes up later.
Ad Accounts and Spending: Build in Redundancy
Don't Run Everything Through a Single Ad Account
Concentrating your entire budget in one ad account means one restriction can stop all of your campaigns at once. Where your spend justifies it, spreading campaigns across multiple ad accounts inside the same Business Manager gives you a buffer — if one account gets flagged for review, the others can keep running while you sort it out.
Keep Billing Information Clean and Consistent
Mismatched billing names, frequently changed payment methods, and cards that don't match the verified business details are common triggers for manual review. Keep your payment information consistent with your verified business identity, and avoid swapping payment methods more often than necessary.
Watch Account Quality, Not Just ROAS
Meta's account quality and ad account status information is easy to ignore when campaigns are performing well, but it's often the earliest warning sign of a policy issue before a restriction actually lands. Check it on a regular cadence, the same way you'd check performance metrics, not just after something has already gone wrong.
Assets and Compliance: Protect What's Attached to Your BM
Keep Domains, Pages, and Pixels Properly Verified and Owned
Every domain, page, and pixel attached to your Business Manager should have clear, documented ownership — not a loose connection left over from a previous agency or a shared asset nobody fully controls. Verify domains you actually own, and periodically confirm that assets attached to your BM are ones you recognize and still use.
Document Every Change You Make
Keep a simple record of who was added or removed, when verification was completed, and when major settings changed. It sounds unnecessary until you need to prove ownership history or troubleshoot when something changed unexpectedly. A spreadsheet is enough — the point is having a record at all.
Common Business Manager Mistakes That Trigger Restrictions
- Adding unknown or unverified partners just to speed up a task, then forgetting to remove them
- - Using the same Business Manager for multiple, unrelated businesses or industries
- Ignoring policy notifications until an ad account is already restricted
- Sharing admin logins directly instead of adding people as proper users
- Letting a single person hold all admin access with no documented backup
- - Changing business information (name, address, payment details) frequently without a clear reason
A Quick Business Manager Health Checklist
- Business verification is complete and matches your current legal details
- - Every admin account has two-factor authentication enabled
- - Partner and employee access has been reviewed in the last 90 days
- - Ad spend isn't concentrated in a single ad account with no backup
- - All attached domains, pages, and pixels have clear, confirmed ownership
- - Billing details are consistent with your verified business identity
Frequently Asked Questions
How many ad accounts can one Business Manager have?
The limit depends on your Business Manager's verification status, age, and spending history rather than a single fixed number, and Meta adjusts these limits over time. A verified BM with a stable spending history typically supports more active ad accounts than a new, unverified one.
What's the real difference between a personal ad account and a Business Manager?
A personal ad account is tied to one individual's profile, with no structured way to share access safely. A Business Manager separates ownership from day-to-day access, letting you add team members and partners with specific roles without ever sharing login credentials.
Can a restricted Business Manager be recovered?
Sometimes. It depends on the reason for the restriction and whether it's tied to policy violations, identity verification issues, or a specific ad account problem. Meta provides an appeal process for most restrictions, though outcomes vary and aren't guaranteed, which is exactly why prevention matters more than recovery.
Final Thoughts
None of these tips are complicated on their own — two-factor authentication, access reviews, clean billing details, verified assets. What actually protects a Business Manager is doing all of them consistently, before there's a problem, rather than scrambling to fix things after an ad account gets restricted. Treat your Business Manager as seriously as you treat the campaigns running inside it, and it will hold up a lot better when it's tested.