# Permissions | Developer Documentation

<div id="bkmrk-permissionsupdated%3A-">## Permissions

<div><span>Updated: Nov 5, 2025</span></div><div>Platform endpoints are gated by permissions. References for each endpoint indicated which permissions it requires, but in general, you will need the following:</div>
<span>[whatsapp\_business\_management](https://developers.facebook.com/docs/permissions#whatsapp_business_management) - needed to access metadata on your WhatsApp Business Account, template management, getting business phone numbers associated with your WABA, all analytics, and to receive webhooks notifying you of changes to your WhatsApp Business Account</span><span>[whatsapp\_business\_messaging](https://developers.facebook.com/docs/permissions#whatsapp_business_messaging) - needed to send any type of message to a WhatsApp users, and to receive incoming message and message status webhooks</span><div>Depending on your business needs, you may also need these permission:</div>
<span>[business\_management](https://developers.facebook.com/docs/permissions#business_management) - only needed if you need to programmatically access your business portfolio (this is rarely needed, since you can access your portfolio using [Meta Business Suite<span>?</span>](https://business.facebook.com/).</span><span>[whatsapp\_business\_manage\_events](https://developers.facebook.com/docs/permissions#whatsapp_business_manage_events) - only needed if you are sending marketing templates with [Marketing Messages API for WhatsApp](/books/meta-whatsapp/page/marketing-messages-api-for-whatsapp-developer-documentation), in conjunction with the [Conversions API](https://developers.facebook.com/docs/marketing-api/conversions-api), for event tracking.</span><span>[ads\_read](https://developers.facebook.com/docs/permissions#ads_read) - only needed if you are using [Marketing Messages API for WhatsApp](/books/meta-whatsapp/page/marketing-messages-api-for-whatsapp-developer-documentation) in conjunction with the [Insights API](https://developers.facebook.com/docs/marketing-api/insights) to get conversion metrics</span><div id="bkmrk-app-review"><div id="bkmrk-app-review-1"><div>### App Review

</div></div></div><div>If you are a [solution provider](/books/meta-whatsapp/page/solution-providers-developer-documentation) and other businesses will be using your app to access their data, your app must undergo [App Review](/books/meta-whatsapp/page/app-review-developer-documentation), and you must be approved for **advanced access** for any permissions your app needs. If you aren't approved for advanced access for a given permission, your app users will be unable to grant your app that permission.</div><div>If you are a direct developer and will only be accessing your own business data, you do not need to under App Review and do not need advanced access for any permissions.</div><div id="bkmrk-how-to-get-permissio"><div id="bkmrk-how-to-get-permissio-1"><div>### How to get permissions

</div></div></div><div>App users must grant your app individual permissions. If you are a direct developer and are using a system token, when you create a [system token](/books/meta-whatsapp/page/access-tokens-guide-developer-documentation), you must create a system user and use it to grant your app individual permissions as part of the system token creation process:</div><div>![](https://support2.chatarchitect.com/uploads/images/gallery/2026-04/embedded-image-apnfk7xv.png)</div><div>If you are a [solution provider](/books/meta-whatsapp/page/solution-providers-developer-documentation) using [business tokens](/books/meta-whatsapp/page/access-tokens-guide-developer-documentation), the Embedded Signup [authorization screen](/books/meta-whatsapp/page/customizing-the-default-flow-developer-documentation) allows the user to grant your app permissions for which you have advanced access approval:</div><div>![](https://support2.chatarchitect.com/uploads/images/gallery/2026-04/embedded-image-hcnuabmp.png)</div></div>