Meta App Review Instructions
App: Live Ads Operator (App ID 1043417018641114)
Implemented Use Case
An authorized business operator signs in with Facebook and uses a read-only dashboard to select the correct managed Page, confirm the authorized business portfolio, and inspect ad account status and recent advertising performance.
No advertising write action occurs in this submission. The reviewer flow does not create, edit, activate, pause, publish, or change the budget of any ad.
Requested Permissions and Exact Product Actions
| Permission | Why it is needed | Visible API evidence |
|---|---|---|
pages_show_list |
The operator must identify the Facebook Page they are authorized to use before running a live-commerce advertising workflow. | Click Load Managed Pages. The app calls GET /me/accounts?fields=id,name,category and renders the returned Page names and IDs. |
business_management |
The operator must confirm the business portfolio that owns or has access to the assets used in the workflow. | Click Load Business Portfolios. The app calls GET /me/businesses?fields=id,name and renders the authorized portfolio names and IDs. |
ads_read |
The operator needs read-only account status and recent performance to monitor authorized advertising assets without changing delivery. | Click Load Ad Account Data. The app calls GET /me/adaccounts and GET /{ad-account-id}/insights, then renders account status and seven-day metrics. |
Reviewer Reproduction Steps
- Open the public reviewer test app.
- Click Continue with Facebook.
- Complete the official Meta Login dialog and grant
pages_show_list,business_management, andads_read. - Return to the test app and click Load Managed Pages. Confirm that real Page data is visible.
- Click Load Business Portfolios. Confirm that real authorized business data is visible.
- Click Load Ad Account Data. Confirm that real account status and seven-day insights are visible.
- Confirm that all four progress steps are green and the activity log reports three successful API checks.
Data and Safety Notes
- The test page never prints the Facebook access token or writes it to browser storage.
- Only assets authorized for the signed-in account are returned by the Graph API.
- Deferred permissions, including
ads_managementandpages_read_engagement, are not requested or demonstrated in this resubmission. - If a reviewer test account has no authorized assets, the UI clearly reports a successful zero-item API response.