It's not possible to enable a Facebook or other social business account on the organization. You need to do it user by user increasing the possibility to execute undesirable social ads campaign. It could be easier and save to enable all social business account as a Org Admin (once on the organization) and define which WCA users can have access to each social business account. It's a desirable feature to have an approval workflow before to execute social ads campaigns.