Ownership is not the same as access
When reviewing a Meta advertising setup, separate two questions: who owns an asset, and who can use it. An ad account or Facebook Page may be associated with a business portfolio, while people or other businesses are granted access to work with it. Being able to open an asset does not, by itself, show that you own it or control who else can use it.
A seller may describe an ad account as “yours” because they have given you a role on it. That access can be useful, but it is different from control over the business structure behind the account. If the seller or another party retains ownership or administrative authority, they may still have meaningful influence over the asset’s access and management.
Treat the distinction as part of the product you are evaluating, not as a technical detail to sort out later. Ask what is being transferred, what is merely being shared, and which business or person will remain in charge after handover.
What a business portfolio can contain
Meta Business Suite and its business portfolio tools provide a way to organize business assets and the people who work with them. Depending on the setup, a business portfolio may have an ad account and a Facebook Page associated with it. These assets can have their own access arrangements, so permission on one should not be assumed to grant permission on another.
A simple ownership map can make the arrangement easier to understand:
Business portfolio → ad account and Page People or partner businesses → assigned access to specific assets
For each asset, record the business shown as its owner or controller, the people with access, and the scope of their roles. If the ad account and Page sit in different business portfolios, write that down too. The aim is not to assume that one shared screen or login represents a single, unified transfer. It is to understand how the parts relate.
What an administrator can do
An administrator generally has broader management authority than someone assigned a narrower working role. Depending on the asset and the access structure, administrators may be able to manage permissions, add or remove people, or change how an asset is administered. Ordinary users may be able to perform specific advertising or content tasks without having the same authority over access and ownership.
The exact controls available can depend on the asset and the setup, so avoid relying on a role label alone. Ask the seller to show which people and businesses have access, and what level of control each has. Check the ad account and Page separately, then review the business portfolio connected to them.
A person who can create or manage campaigns is not necessarily the person who can decide who else gets access. Conversely, an administrator who does not handle daily campaigns may still have substantial control over the working setup.
Why a seller’s retained access matters
If a seller keeps an administrative role after a sale, the transfer may be incomplete in a practical sense. They may retain the ability to affect access or administration, even if the buyer can already use the account. That creates uncertainty about who can make decisions and who is responsible for maintaining control.
This is why “you can log in” is not a complete handover description. Ask whether the seller will remain connected as a person, partner business, or administrator, and whether any other party will remain. If ongoing access is intended for a legitimate operational reason, define its purpose and limits in writing. If it is not intended, agree on how it will be removed through the platform’s normal access-management process.
Do not treat a promise of later removal as a substitute for checking the arrangement. Confirm who has authority to make the change and how the buyer will verify the resulting access map.
Questions to settle before accepting the setup
Before accepting an ad account or related assets, ask: Who owns or controls the business portfolio? Who are the administrators now? Which people and partner businesses can access the ad account and Page? Are those assets in the same portfolio? What role will each party have after the sale? How will earlier owners or administrators be removed, and who will confirm that this has happened?
Put the answers in writing, along with the assets included in the handover and any access that is meant to remain. Then compare that description with what the platform shows. If the ownership structure is unclear, or the seller cannot explain who retains administrative control, pause and resolve the gap before treating the setup as fully under your control.
An ad account is not the whole setup
An advertising account may hold campaigns, billing settings, audiences and performance history, but a person still needs a way to access and manage it. On Meta, for example, people typically use a personal Facebook profile to reach business tools and advertising assets. Other platforms, including Google Ads, also connect account access to identifiable users, even when the structure and terminology differ.
That makes the operator profile part of the working setup, not a disposable detail. A sound campaign plan can be disrupted if the person responsible cannot sign in, loses access to their profile or no longer has permission to manage the business assets. When assessing an ad account, consider both the account and the people who can operate it.
This distinction matters when choosing or receiving an account as a product. An ad account may appear ready for work, yet its practical value depends on whether access is legitimate, stable and under the control of the people who are supposed to use it. A handover should make clear which business assets are included and how authorized operators will access them.
What a personal profile carries
A personal profile is more than a username and password. It can be associated with a person’s name, contact details, connections, activity and account history. Platforms use account information and activity to manage access, provide security features and assess whether an account can continue to use their services. The exact processes vary by platform and can change.
Those details are why a profile should be treated as an identity-bearing account, rather than a neutral login that can be passed around like a shared tool. Contact information may be needed for security notifications or account recovery. Existing connections and history may also be part of how the profile is recognized in its normal use.
For a media buyer, the practical question is not simply whether a login works today. It is whether the profile belongs to the person using it, whether that person can maintain access to its contact methods, and whether the person is authorized to manage the relevant advertising assets. If those points are unclear, the setup is fragile even if the ad account itself looks usable.
Use an identity the operator is entitled to use
A profile should belong to the individual operating it, and the operator should be entitled to use that profile under the platform’s terms. Do not use another person’s identity, documents or personal profile without their knowledge and consent. Consent alone does not necessarily make an arrangement acceptable under a platform’s rules; the setup must also comply with the applicable terms.
This is not a minor paperwork issue. Using someone else’s identity can leave the actual operator unable to recover the profile or respond to a request for account information. The named person may also retain control of important contact methods or receive security messages. If access is challenged, the business may have no reliable way to establish that its operators are authorized.
Avoid treating a personal profile as a transferable asset in the same way as an advertising workspace. If a seller offers an account bundle, ask what is being transferred, who owns each profile and business asset, and how access will be granted through the platform’s intended tools. Do not accept identity documents or login details that belong to someone else as a shortcut to access.
Losing the profile can mean losing the route in
When a profile is disabled, compromised or otherwise unavailable, the person using it may lose the route they used to reach an ad account. The advertising assets may still exist, but access can depend on whether another authorized operator can manage them. This is one reason account continuity should be planned before campaigns are active, rather than addressed only after a login problem.
Keep control of the operator’s own contact methods and security settings, and use the platform’s available account-protection and recovery options. Make sure the business knows which people have access to its assets and can remove permissions when someone’s role ends. Avoid relying on a single profile as the only path to a business portfolio, ad account or payment-related settings.
If an operator loses access, use the platform’s official recovery and support processes. Do not attempt to get around identity checks by presenting another person’s documents, changing account details to mislead a platform or buying a replacement identity. Those approaches can create further access and ownership problems.
Build team access around roles and continuity
A team should have more than one properly authorized operator where the platform and business structure allow it. Each person should use their own eligible profile and receive only the permissions needed for their work. On Meta, business tools can support assigning access to people and assets; other platforms provide their own ways to manage users and permissions. Use those controls rather than sharing one person’s login.
Keep a simple internal record of who can access each platform, what role they have and who is responsible for reviewing permissions. When someone joins, leaves or changes responsibilities, update access accordingly. A spare operator is useful only if that person has legitimate access in advance and understands the responsibilities involved; a dormant or borrowed profile is not a dependable backup.
Before launching work, check that the intended operators can reach the relevant ad account and that ownership and permissions are understandable. Treat the personal profile, business assets and ad account as connected parts of one operational setup. Clear ownership, legitimate identities and well-managed roles will not remove every platform risk, but they make the account easier to manage responsibly and less dependent on one person’s login.