A small group of Facebook Inc. employees have permission to access users’ profiles without the users finding out.

Yet any time a Facebook employee accesses a colleague’s personal profile, the colleague is notified through what is often referred to within the company as a Sauron alert—a reference to the all-seeing eye in the The Lord of the Rings trilogy, people familiar with the matter say.

Similar...