As of v21.0 I can concur that adding "business_management" is necessary.

Additionally the following tool is very useful in detecting what the token has access too so you aren't lost wondering if there was an oAuth issue.

https://developers.facebook.com/tools/debug/accesstoken/

Igy posted a link to it in a comment above that looks like it used to have this tool associated but its been moved to above.