How to Give an Agency Access to Your Social Accounts

September 27, 2026 · 6 min read · by Jan Oršula

Give an agency access by assigning them an official role on the account, never by handing over your password. Every major platform has a built-in way to add a partner or admin who can post and manage without ever logging in as you: Meta partner access, LinkedIn Page admin roles, TikTok Business Center, Pinterest business access, and YouTube channel managers. The role method is safer on every axis that matters: you can revoke it in one click, nobody shares a 2FA code, there's an audit trail of who did what, and it survives staff leaving on either side. Here's how to grant it on each platform, and why the password route is the mistake to never make.

The one rule: roles, not passwords

When someone logs in with your password, they are you. They see your private messages, they can change your recovery email, they can lock you out, and if their laptop is compromised, so is your account. You can't limit what they touch and you can't see what they did. Sharing the password also means sharing the 2FA, so either you kill the protection that keeps hackers out, or you're texting login codes back and forth all day.

Official roles fix all of it. You grant a specific permission level to a specific person or partner business; they work under their own login with their own 2FA; you see them in the admin list; and you remove them the moment the relationship ends. This is the same principle behind good client onboarding: set access up right at the start so offboarding is a clean, one-click removal later.

Meta: partner access, not a login

For Facebook and Instagram, access runs through the Meta Business Portfolio (formerly Business Manager). The owning business keeps the assets (the Page, ad account, Instagram account) and grants a partner business permission to work on them.

1. The client opens Business settings → Partners, clicks Add, and chooses Give a partner access to your assets (or, from the agency side, Ask a partner to share their assets).
2. They enter the partner's Business Portfolio ID, a 16-digit number the agency sends over.
3. They pick the assets (Page, Instagram, ad account) and set the permission level for each.

The agency now manages those assets from their own portfolio. Nobody logs into the client's personal Facebook, and the client revokes access anytime by removing the partner. Meta publishes the full steps in its Business Help Center. Avoid the old habit of adding an agency employee as a personal Page admin by profile. Partner access at the business level is cleaner and doesn't tie the account to one person's Facebook login.

LinkedIn: Page admin roles

A LinkedIn Company Page is managed by adding admins, each with a defined role. From the Page, go to Admin tools → Manage admins → Add admin, search for the person (you must be connected or following), and assign a role:

• Super admin: full control, including adding and removing other admins. Keep this to the client, or one trusted lead.
• Content admin: can create and manage posts and events. This is the right role for most of the agency team.
• Analyst: view-only access to analytics.
• Paid media roles: separate roles for running and posting sponsored content.

Because it's per-person and per-role, you give the agency exactly what it needs and nothing more. This only covers the Page; personal-profile posting can't be delegated, which is one more reason to understand the Company Page vs personal profile split before you plan the work.

TikTok, Pinterest, and YouTube

• TikTok: Business Center. TikTok's Business Center lets a business hold accounts and ad assets and invite members by email. Assign the Standard role and grant access only to the specific accounts and assets the agency needs; keep Admin for the owner. Members work under their own logins, and you remove them from the member list to revoke.
• Pinterest: business access. In Pinterest Business settings, use Partnerships / manage access to invite the agency to your business account and set their permission level. Same pattern: invite by account, not by password, remove when done.
• YouTube: Brand Account managers. A channel built on a Brand Account can have multiple people attached with roles: Manager (upload, edit, view analytics), Owner, or Communications manager (respond to comments only). Add them under channel Settings → Permissions. Google delegates access through the person's own Google Account, so no Google password is ever shared. Google covers it in the YouTube Help Center. If your channel predates Brand Accounts, moving it to one is what makes safe delegation possible at all.

Why the role method wins

Put the four advantages side by side and the case closes itself:

• Revocable in one click. Remove the partner or admin and access ends instantly, with no password to change and no scramble.
• No 2FA sharing. Everyone keeps their own login and their own second factor, so the account's real protection stays intact.
• An audit trail. Roles are logged. You can see who has access and, on most platforms, who did what.
• Survives staff changes. When someone leaves the agency or the client team, you remove their role. The account isn't tied to a shared password that now has to be reset across everyone.

For agencies running this across a roster of clients, standardizing on roles from day one is what makes it possible to manage multiple clients without a spreadsheet of passwords that becomes a breach waiting to happen. Set access up the right way once and it stays clean. And if you're the client, insist on it. A reputable agency will never ask for your password; they'll send you their Business Portfolio ID and a request to be added as an admin. And however you grant access, turn on strong account security underneath it.

Frequently asked questions