Integrating WhatsApp Cloud API with your business applications requires a permanent (never-expiring) access token. For this, Meta (Facebook) requires you to generate the token through a “system user” in your Business Manager account. Many users, however, encounter a roadblock with this message:

“The admin system user must be at least seven days old before creating other admin system users.”

What Does This Error Mean?

This error appears in Meta Business Manager when you attempt to create a new admin system user but your current admin system user (or business account) is less than seven days old. It’s a security policy designed by Meta to reduce the risk of misuse or mass creation of admin users within a short period.

Why Do You Need an Admin System User?

• Permanent access tokens for WhatsApp Cloud API can only be generated via admin system users.
• System users are special users in Meta Business Manager meant for server-to-server integrations — NOT linked to real people.
• Giving “Admin” rights ensures the system user can manage assets, generate tokens, and perform API actions without manual intervention.

How to Fix/Proceed?

1. Wait for Seven Days
   • The simplest solution is to wait until your admin user (or business account) is at least seven days old.
   • After this waiting period, the restriction will be automatically lifted and you can create new admin system users or generate permanent tokens.
2. Check Existing System User
   • If you already have a system user who is older than seven days, use that user for assigning assets and generating tokens.
3. Create the System User and Assign Assets
   • Go to Business Settings > Users > System users.
   • Add a new system user, assign an appropriate and descriptive name (e.g., whatsapp_api_system_user).
   • Set the role to Admin.
   • Assign your WhatsApp app and business assets to this user, granting “Full control.”
4. Generate Permanent Token After Waiting
   • Once allowed, select your system user.
   • Click Generate Token and select the required permissions (whatsapp_business_management, whatsapp_business_messaging).
   • Save the token securely — it will not be shown again.

Best Practices

• System User Naming: Use clear, purpose-based names like mhn_whatsapp_api_user or notification_integration_user for traceability.
• Security: Save and protect your permanent token, as it gives API-level access to your business account.
• Role Assignment: Always give admin role only to trusted integrations; review your system users regularly.