What the error looks like
It shows up when you invite someone from the People section or from Security Center. Sometimes you also can't remove a person who's already listed. Nothing on the screen says why.
Because the message is so generic, it's easy to assume your account is restricted, or to start rebuilding everything. Don't do either yet.
Cause 1: a security glitch on the Portfolio itself
In this version, the Portfolio looks healthy and active, but every way of adding someone fails, and removing people fails too. In cases like this the most likely culprit is a backend two-factor sync problem on the Portfolio. It isn't a standard permissions or verification issue.
What to do: wait overnight and try again. If it's still failing, open a new Meta Support chat and ask for a manual reset of the security flag on that specific Portfolio ID. Don't create a new Portfolio as a workaround.
Cause 2: a restriction on the admin's personal profile
Every Business Portfolio is run by real people's personal Facebook profiles. If the profile doing the inviting has its own restriction, the Portfolio can show this same error even though nothing is wrong with the Portfolio.
Here's what that looked like on a recent client case. The admin's personal profile had an advertising restriction plus identity and integrity blocks. Their Account Status told them they were blocked from managing business assets "because you don't use two-factor authentication," but two-factor was already on. The message was misleading. The real cause was the restriction on the profile, and Meta described the decision as final.
What to do: you can't fix this from inside the Portfolio. Check that admin's personal Account Status, and if there's a review option, use it once with a clear explanation. Meta makes the final call.
While that plays out, you can keep the business moving. Page access is separate from Portfolio access, so the restricted owner can give a second person full control of the Page itself. That doesn't give the second person the Portfolio, but it lets them run the Page.
How to tell which one you have
Don't add the person from someone else's login
If you're an agency or freelancer being asked to add a developer or contractor, the invite should come from the business's own admin, not from you. Granting Portfolio access to someone nobody has vetted is how old access ends up causing problems months later.
