Instagram Business Manage Messages App Review: Proven 2026 Fix Guide
A rejected instagram_business_manage_messages app review stops an Instagram DM inbox, chatbot or CRM before a single customer can connect. This permission belongs to the Instagram API with Instagram Login, where the professional account signs in directly with Instagram. It is not the similarly named Facebook Login permission, and mixing the two is a common reason submissions fail. This instagram_business_manage_messages app review guide covers allowed usage, rejection causes, screencast proof and appeals. No templates, no invented approval rates.
WHAT failed
The reviewer never saw an Instagram login, a grant, and a real DM handled in your app.
WHY it matters
This scope reads and answers private conversations, so proof must be concrete.
WHAT they expected
Login, consent, an inbox message, and a reply landing in the Instagram app.
instagram_business_manage_messages vs instagram_manage_messages
Meta runs two Instagram API setups, each with its own messaging permission. The Instagram Platform overview lists them side by side, and the Permissions Reference gives each one different dependencies.
| Instagram Login | Facebook Login | |
|---|---|---|
| Messaging permission | instagram_business_manage_messages | instagram_manage_messages |
| Dependencies | instagram_business_basic | instagram_basic, pages_read_engagement, pages_show_list |
| Who logs in | The Instagram professional account | A Facebook user who manages the linked Page |
| API host | graph.instagram.com | graph.facebook.com |
If your product connects through Facebook and a Page, you need the other scope; read the instagram_manage_messages app review guide instead. An instagram_business_manage_messages app review only makes sense when the recording shows an Instagram login. Meta replaced the old business_manage_messages scope value with this name; old values were deprecated on 27 January 2025, so check your authorization URL first.
What the Permission Allows, and Which Policies Apply
The Permissions Reference says the instagram_business_manage_messages permission lets an app access messages on an Instagram professional account. Allowed usage is to view, manage and respond to messages, and to use third-party customer relationship management (CRM) tools to manage messages. The use case field asks you to explain the messaging functionality your app offers to business customers who are onboarded onto the platform, and how they perform those functions.
Two parts of the Meta Developer Policies (updated 3 February 2026) explain the what and the why. Section 1, item 6 requires you to follow the Developer Docs, including allowed usage, so in an instagram_business_manage_messages app review a feature outside "view, manage and respond" is a policy problem, not a wording problem. Section 1, item 9 requires promotions run on Meta products to follow the relevant promotion guidelines, including the Instagram Promotion Guidelines. That matters for DM tools that run "comment to win" or giveaway flows. Messaging also follows the standard 24-hour window set out in the policies' messaging section.
Why Does Meta Reject instagram_business_manage_messages?
Most instagram_business_manage_messages app review rejections mean the reviewer could not verify the use. Fewer mean the use itself is not allowed.
- Wrong login family. The video shows Facebook Login and a Page picker, but the request is for the Instagram Login scope, or the reverse.
- No visible conversation. The recording shows a settings page or a webhook log, never a message arriving and a reply going out.
- Already-connected account. The video starts logged in, so the reviewer never sees the consent screen or the permission being granted.
- Unexplained automation. Bot replies, broadcasts or replies outside the messaging window with no human or policy context look like spam.
- Reviewer cannot test. Missing test access, a broken login or an unreachable app fails the whole submission.
- Extra scopes. Comment, publishing or insights permissions requested with no matching feature in the video.
A vendor's generic reply pasted into an instagram_business_manage_messages app review form fixes none of these. Self-hosted inboxes such as Chatwoot are judged on your own deployment and recording.
What Screencast Proof Does Meta Expect for instagram_business_manage_messages?
The Permissions Reference entry starts with one clear instruction: demonstrate the complete Instagram login process on your app platform and show how your app user grants the permission. The Facebook Login twin, instagram_manage_messages, spells out the rest: show your app sending a message to an Instagram user and the native Instagram inbox, on web or mobile, receiving and displaying it. Plan your instagram_business_manage_messages app review recording around the same beats.
- Start the instagram_business_manage_messages app review video logged out. Click your Instagram connect button, sign in as the professional account, and show the consent screen.
- Send a DM from a separate Instagram account and show it appearing in your inbox through the
messageswebhook. - Reply from your app and show the reply arriving in the Instagram app on the customer's side.
- If your product hands chats to people, show the human inbox. Meta's messaging docs say a human-agent escalation inbox must receive messages, render them correctly, and send replies that people actually receive.
Meta's Send Messages documentation also notes that testers must have a role on your app and on the Instagram professional account, and that Standard Access covers only accounts you own or manage. That is why an instagram_business_manage_messages app review needs Advanced Access for customer accounts, which in turn requires Business Verification. The Meta App Review screencast guide covers recording quality, and the webhooks App Review guide covers the endpoint reviewers test.
The Risk of Blind Resubmissions (7-Day Cooldown Warning)
The usual instagram_business_manage_messages app review loop is a rejection, a rewritten paragraph, the same video and another submit. Read the feedback first; if the use is not allowed, new wording will not change it.
7-day cooldown warning: Resubmitting an instagram_business_manage_messages app review while the login, inbox and reply are still not reproducible usually fails again. Repeated failures are widely reported to trigger an App Review cooldown of about 7 days. In 2026 the App Review dashboard also says most submissions are reviewed within 20 days, so every wasted round can cost weeks.
Before any new instagram_business_manage_messages app review, ask: could a stranger with your test credentials log in with Instagram, receive one DM and send one reply? If not, fix that first.
How to Appeal a Rejected instagram_business_manage_messages Submission
An instagram_business_manage_messages app review has two different appeal paths. For an App Review decision, fix the cited problem, then reply in the App Dashboard or resubmit with corrected notes and a new recording. Resubmit unchanged only if a working path was clearly missed. Enforcement is separate: a revoked permission or policy notice goes through that notice or Meta's developer appeals, usually after the app changes.
A good instagram_business_manage_messages app review appeal is specific. Quote the rejection line, show where the new video proves it, and remove scopes you do not use. There is no fill-in template here: a CRM, a help desk and a DM marketing tool need different proof. For broader help see the Instagram App Review service and the Instagram API Advanced Access guide.
Need Us to Get Your Meta App 100% Approved?
Stop losing weeks to repeated rejections. With 500+ apps approved, we handle your entire submission from start to finish. You get 100% Approval or a 100% Refund — and for your complete safety, you can hire us directly through Upwork or Fiverr Escrow (or use the WhatsApp / Calendar buttons in the header & footer).
Chat on WhatsAppInstagram Business Manage Messages App Review: FAQ
What is the instagram_business_manage_messages permission used for?
Meta's Permissions Reference says it lets an app access messages on an Instagram professional account. Allowed usage is viewing, managing and responding to messages, and using third-party CRM tools to manage them. It is the messaging permission of the Instagram API with Instagram Login, and its only listed dependency is instagram_business_basic.
What is the difference between instagram_manage_messages and instagram_business_manage_messages?
Both cover Instagram DMs, but in different login families. instagram_business_manage_messages is for apps where the professional account logs in with Instagram. instagram_manage_messages is for Facebook Login apps with a linked Page, and it depends on instagram_basic, pages_read_engagement and pages_show_list. Request only the one your login flow shows.
Does instagram_business_manage_messages need Advanced Access?
Yes, if your app serves Instagram professional accounts you do not own or manage. Meta's messaging docs say Standard Access covers only accounts you own, manage or have added to the app, and some features may not work until Advanced Access is granted. Advanced Access for any permission also requires Business Verification.
Do I need the Human Agent feature as well?
Only if people on your team reply after the standard 24-hour window. Human Agent is a separate feature in the Instagram Login list. If you request it, show a real human inbox that receives messages, renders them correctly and sends replies that customers receive, as Meta's messaging docs describe.
Can I resubmit the same screencast after a rejection?
On an instagram_business_manage_messages app review, only if the working path was already in the video and the reviewer missed it. Otherwise fix the cited issue first, such as the wrong login family or a missing reply. Rapid repeats of the same proof are widely reported to trigger an App Review cooldown of about 7 days.
Amandeep Singh, Meta API and App Review Specialist
10+ years on Meta APIs, 500+ apps approved, 10,000+ permissions handled. , not resubmit templates.
Free 15-Minute Rejection Audit
Send your instagram_business_manage_messages rejection note, the login your app uses, and the last screencast. You get a plain answer: missing proof, wrong family, or a use Meta will not approve.
Meta makes every decision. Independent consulting, not an official Meta service.