Skip to content

Social content workflow guide · By Yes AI

Give someone access to your socials without passwords

Published 5 min read

Handing over a password is the most common way small businesses give a helper access to social accounts, and the hardest to undo. Each major platform has a built-in way to give another person or business access to post, with limits you choose. This guide covers the settings for Meta, LinkedIn and Google Business Profile.

Quick answer

Use each platform's own access tools. On Facebook and Instagram, add the person to your business portfolio in Meta Business Suite, or share the asset with their agency as a partner. On LinkedIn, make them a content admin of your Page. On Google Business Profile, invite them as a manager. Each method lets them post under your business name while you keep ownership and can remove them later.

Clinic office manager setting up account access while a new staff member accepts on his phone

Why not just share the password?

A shared password gives the other person everything the account can do, including changing the name, deleting the Page and removing other admins. It cannot be limited to posting. When the arrangement ends, you have to change the password and sign out every device that used it, and if two-factor authentication was set up on their phone you may need their help to get back in. Shared logins also leave no record of who posted what. The platforms' access tools solve each of these problems: you choose the tasks, the helper signs in with their own login, and you remove them from the same settings page.

How do you add a staff member on Facebook and Instagram?

Meta manages Pages and Instagram accounts through a business portfolio in Meta Business Suite. Someone with full control of the portfolio goes to Settings, chooses People, selects Invite people, enters the staff member's email address, then chooses the assets and permissions to give them. The person accepts with their own Facebook account or a managed Meta account. Meta notes that people get basic access by default and advises assigning only the access they need. To assign an Instagram account, you must first be logged in to it in Business Suite settings. Meta also suggests turning on two-factor authentication for the portfolio.

How do you give an agency access on Meta?

An outside business should be added as a partner, which keeps the assets in your portfolio. The provider gives you their business portfolio ID. In Meta Business Suite settings, under Users, choose Partners, then Add, then 'Give a partner access to your assets', enter the ID, and choose the Page, Instagram account or ad account and the level of access. Partial access limits them to tasks such as creating content, managing ads or responding to messages. Meta says a partner with full control still cannot share your asset with another business. Only someone with full control of your portfolio can add a partner, and another full-control user may need to approve it.

How do you add a LinkedIn Page admin?

LinkedIn Pages have tiered admin roles. A super admin can do everything, including adding and removing admins, editing Page information and deactivating the Page. A content admin can create and manage Page content, including posts, boosting posts and events. An analyst can see only the Analytics tab. For someone who writes and schedules posts, content admin is the right level. Keep at least two super admins inside your business, so the Page is not stranded when one person leaves. Paid media roles, such as Sponsored Content poster, are separate and apply to ads run through Campaign Manager.

How do you add a manager on Google Business Profile?

In your Business Profile, select More, then Business Profile settings, then People and access, then Add, and enter the person's email address. Choose manager for anyone outside the business. Google says managers have mostly the same access as owners, including editing information, responding to reviews and managing posts, but cannot add or remove users or remove the profile. A profile can have several owners but only one primary owner, and that should be you or a business partner. Each person needs their own Google Account, which is how Google lets several people manage a profile without sharing a password.

What should you do when someone leaves?

Remove access on the day the arrangement ends, from the same settings: People or Partners in Meta Business Suite, the admin list on your LinkedIn Page, and People and access on Google Business Profile. Review any posts the person scheduled and decide whether they should still go out. If they ran ads, check that the ad account's payment method is yours and that no campaigns are still running. Keep a short access register listing each account, who has access, at what level and the date it was given, and review it every quarter.

Do scheduling tools need access too?

Many businesses schedule posts through a third-party tool instead of each platform's own composer. Those tools connect to your accounts through a permission screen on each platform, using the login of whoever connects them. If a provider connects your Page to their tool, ask which login was used and record the tool in your access register alongside the people. When the arrangement ends, check each platform's list of connected apps as well as its list of people, and remove any tool you no longer use. If you connect a tool yourself, use an account that belongs to the business, not a staff member's personal login.

Access for a helper who writes and schedules posts

PlatformWhere to add themRole to giveWhat they cannot do
Facebook and Instagram (staff)Meta Business Suite settings, PeopleAccess to the Page or account limited to the tasks they needAnything outside the tasks you assign
Facebook and Instagram (agency)Meta Business Suite settings, PartnersPartial access for content tasksShare your assets with another business
LinkedIn PagePage admin toolsContent adminAdd or remove admins, edit Page information or deactivate the Page
Google Business ProfileBusiness Profile settings, People and accessManagerAdd or remove users, or remove the profile

Practical checklist

  • At least two people inside your business have full control of each account.
  • Every helper uses their own login, never a shared password.
  • Each helper has only the tasks they need, such as creating content.
  • Agencies are added as partners, and your Pages stay in your business portfolio.
  • Two-factor authentication is on for your business portfolio.
  • An access register lists each account, each person and their level of access.
  • Access is removed on the day an arrangement ends.

Common questions

What if our Facebook Page is already in an agency's business account?

Ask the agency to share it back or move it to your portfolio. Meta says only the organisation that owns an asset can share it with another business portfolio, so if the agency created the Page inside their own portfolio, they need to cooperate. Get ownership confirmed in writing before you start with any new provider, so this does not happen again.

Do we need a business portfolio for a small Facebook Page?

Meta's people and partner settings described in this guide sit inside a business portfolio in Meta Business Suite, so a portfolio is the practical way to give staff and providers access with set permissions. It also keeps ad accounts in one place and shows you who has access to what.

Can a provider post to TikTok without our password?

TikTok has its own business tools for managing accounts and ads, which this guide does not cover. Check TikTok's current help pages on adding members before you share access, and apply the same rules as on other platforms: their own login, limited permissions and removal when the work ends.

How do we find out who already has access?

Look at People and Partners in Meta Business Suite settings, the admin list on your LinkedIn Page, and People and access in your Google Business Profile. Former staff and old agencies often still appear. Remove anyone who no longer needs access, then start your access register from that clean list.

Sources and further reading

Continue planning

Plan the next step in your social content workflow

Describe the channels you use, how content is prepared and who approves it. We can discuss a practical workflow for drafts, checks and publishing. Keep customer details, account credentials and private campaign material out of this enquiry.