Postora

A handbook for people who run social media for a business or for clients

Account access, ownership and security

Agency offboarding: remove agency access and take back your Facebook business and social accounts

By the Postora editorial teamUpdated First published 14 min read

Short answer

To remove agency access from a Facebook business portfolio, someone with full control opens Meta Business Suite, Settings, Partners, Options, Remove from business portfolio. Move ownership first: Google ownership transfers run on 7-day waiting rules; a Page release request can sit pending 30 days.

This is general information, not legal advice. Rules change and depend on your country and situation; check the linked official sources or ask a qualified lawyer.

That path ends with Remove partner and needs full control of the portfolio (Meta). Removal only works from the top role. If the agency's portfolio owns your Facebook Page, or the agency is primary owner of the Brand Account behind your YouTube channel, the agency can remove you, and you cannot remove it until that role moves to you. Every path and waiting period below comes from the platforms' own help pages, read on 28 September 2026.

In what order should you offboard an agency?

  1. Check who owns each asset. Owner and partner are different positions, and only the owner can remove the other.
  2. Export data and reports. Some exports need the top role, and download links expire.
  3. Transfer ownership where the agency holds it. Google's transfers run on 7-day clocks, so start them on day one.
  4. Remove partners and people. Business-level removal and asset-level removal are separate steps on Meta.
  5. Revoke third-party apps. Tools connected for business accounts do not expire through disuse.
  6. Rotate shared passwords and recovery details. A new password does not remove role-based access, and a removed role does not change a shared password.
  7. Re-check two-factor authentication. An agency phone can still be a login device.

Step 1: who owns each asset?

Write one row per asset: who holds the top role, and whether the agency sits inside your structure or you sit inside theirs.

Platform Where to look You own it when
Facebook Page Meta Business Suite, Settings, Pages; and the Page's own settings, Page setup, Page access The Page is listed in your business portfolio. Page access shows a "Business account access" section only when a business account owns the Page (Meta)
Instagram Meta Business Suite, Settings, Instagram accounts The account is in your portfolio. An Instagram account can be in only one business portfolio (Meta)
YouTube on a Brand Account Google Account, Brand Accounts, Manage permissions Someone in your business is primary owner. Every Brand Account has exactly one (Google)
YouTube with channel permissions YouTube Studio, Settings, Permissions Your business holds the Owner role (YouTube)
Google Business Profile Business Profile settings, People and access Someone in your business is primary owner (Google)
LinkedIn Page Super admin view, Settings, Manage admins Someone in your business is a super admin. Every Page must have at least one (LinkedIn)
TikTok Business Center, Accounts, TikTok accounts The account sits in your Business Center, or the login is yours. Organization Accounts belong to the Business Center that created them (TikTok)
Pinterest Business Manager, Employees and Partners Your business is the Account Owner, which "has sole control over authentication of the business account" (Pinterest)
X Security and account access, X Delegate The login is yours. Only the owner manages the password, phone number and login verification (X)

Any row where the agency holds the top role goes to step 3 before anything else changes.

Step 2: export data and reports first

Export while the agency still cooperates and while you still have the access an export needs.

  • Facebook Page. A copy of the Page needs full control. It is requested from the Page's settings under Download your information, and the download link expires after four days (Meta).
  • LinkedIn Page analytics. From the admin view, Analytics, pick Content, Visitors, Followers or Competitors, click Export and choose a timeframe. The file is XLS (LinkedIn).
  • The agency's own tools. Reports, the content calendar, scheduled posts and design files often sit in software the agency pays for. Ask for them in writing, with a date. Posts still queued in its tool stop publishing once you revoke its access in step 5.

Step 3: how long does each ownership transfer take?

These are the official conditions for moving the top role. Where a waiting period exists, it starts when the person joins, so add your own person on day one.

Asset Who starts it Condition or waiting period
Google Brand Account (including a YouTube channel on it) Any owner, from Manage permissions. An owner can also make themselves primary owner The person making the change must have been an owner for 7 days or more, and the new primary owner a manager or owner for 7 days or more. An owner also waits 7 days before removing managers or owners. If the change fails, YouTube says to check that the channel is opted out of channel permissions (Google, YouTube)
YouTube channel not on a Brand Account Owner, by converting to a Brand Account Under channel permissions the Owner role "can't transfer ownership to other users" (YouTube). YouTube's route is to convert the channel to a Brand Account by removing all roles in channel permissions, then follow the row above (YouTube)
Google Business Profile Primary owner only The profile needs at least one other owner or manager. A new owner waits 7 days before removing other users or changing primary ownership (Google)
Facebook Page Current portfolio removes it; you add it Meta says you can't transfer a Page to another business portfolio. The owner removes it, then another organisation can add it (Meta)
Facebook Page, by release request You, with full Facebook access to the Page The request has a 30-day pending period. If approved, the Page leaves the other business account after a 72-hour grace period (Meta)
Instagram account Holding portfolio removes it; you add it Disconnect it from any Facebook Page first (Meta). Adding it to your portfolio needs the Instagram username and password (Meta)
TikTok ad account Admin of the Business Center that owns it The source admin sends it to your Business Center ID and an admin of yours approves. TikTok says processing "may take several minutes to a few hours" (TikTok)
TikTok Organization Account None It cannot be removed from the Business Center that created it (TikTok)

A worked timeline

Take an agency that is primary owner of your Brand Account and your Business Profile, and whose business portfolio owns your Facebook Page. You have full Facebook access to the Page.

  • Day 0. The agency adds your staffer as owner of the Brand Account and of the Business Profile. You send the Page release request.
  • Day 3. The earliest the Page can leave the agency's business account, if the agency approves on day 0 (72-hour grace).
  • Day 7. Your staffer has been an owner for 7 days and can make themselves primary owner of the Brand Account without the agency (YouTube). On the Business Profile only the primary owner can transfer primary ownership, so the agency makes that change (Google). Your staffer can then remove the agency from both Google assets.
  • Day 30. An unanswered Page release request expires. Only one request can be pending at a time, and after a denial Meta says you can request release again (Meta).

With full cooperation, that offboarding still takes 7 days. A notice period shorter than that leaves you depending on the agency after the contract has ended.

Step 4: remove partners and people

Platform Path Note
Meta, partner Business Suite Settings, Partners, Options, Remove from business portfolio, Remove partner Needs full control of the portfolio (Meta)
Meta, person Settings, People, the person's name, Remove Revokes their access to the portfolio and its assets. Another full-control person may need to approve it under Requests (Meta)
Facebook Page in your portfolio Settings, Pages, the Page, the person, Manage, Remove access Does not remove them from the portfolio (Meta)
Facebook Page, direct access Page settings, Page setup, Page access, options next to the person, Remove access Removing another admin may need their approval. Meta says a request not actioned within 30 days "may be auto-approved" (Meta)
Google Business Profile Business Profile settings, People and access, the person, Remove person Their review replies and posts stay on the profile (Google)
YouTube Studio, Settings, Permissions, the arrow under Role, Remove access Brand Account channels switch to channel permissions first (YouTube). Finish any primary-owner change before switching, since YouTube ties that change to being opted out of channel permissions (YouTube)
LinkedIn Page Super admin view, Settings, Manage admins, Page admins or Paid media admins tab, Delete icon, Remove Check both tabs (LinkedIn)
TikTok, partner Business Center, Partners, the partner, Delete, Delete Partners lose access to the assets assigned to them (TikTok)
TikTok, member Business Center, Users, Remove, Confirm, verification code Admins only (TikTok)
Pinterest Business Manager, Partners, the "-" next to the partner; Employees, the person, Edit details, Remove employee The Account Owner and Managers can do this (Pinterest)
X Security and account access, X Delegate, Members you've delegated to, Remove from account Owners and admins manage delegates (X)

One Meta detail catches people after a Page moves. People who had access to the Page before it was added to a business portfolio "can still access and manage the Page" (Meta). After you take the Page into your portfolio, check its direct Page access list as well as the portfolio.

Step 5: revoke third-party apps

Scheduling, reporting and inbox tools connect through someone's login, which may be an agency employee's. Two platforms state that these connections do not lapse on their own. On Facebook, an unused integration loses access to personal, non-public information after 90 days, but that "does not affect a business integration's connection to your Facebook business assets" (Meta). Instagram does not expire apps that manage business and creator accounts after 90 days of inactivity (Instagram).

Platform Path to remove a connected app
Facebook Settings and privacy, Settings, Business integrations, select the integration, Remove (Meta)
Instagram (computer) More, Settings, Website permissions, Apps and websites, Active, Remove (Instagram)
TikTok Profile, Menu, Settings and privacy, Security & permissions, Apps and services permissions, the app, Remove access (TikTok)
LinkedIn Me, Settings & Privacy, Data privacy, Permitted Services, Change, Remove (LinkedIn)
Google and YouTube myaccount.google.com/linkedapps, the app, See details, Remove access (Google)
X Settings and privacy, Apps and sessions, Revoke access (X)

Run the check on every login that ever connected a tool, not only the owner's. Revoking stops future access; it does not claw back what the app already holds. LinkedIn says the app owner "may retain your LinkedIn data received prior to the settings change" (LinkedIn), and Google says deleting a Sign in with Google link "doesn't delete your data on the app" (Google). If you are replacing the agency's tools with your own, the questions to ask before you buy a social media tool cover roles, account ownership and exports.

Step 6: rotate shared passwords and recovery details

A password change and a role removal fix different things. On X, delegates "won't lose access to the account" when the owner changes the password (X). The reverse also holds: removing someone's role does nothing about a password they know. Do both wherever a login was ever shared.

  • Change the password. On Instagram: Accounts Centre, Password and security, Change password (Instagram).
  • End other sessions. On Instagram: Accounts Centre, Password and security, Where you're logged in, Select devices to log out (Instagram). On X: Apps and sessions, Log out all other sessions. X notes that data already cached on a device, such as Direct Messages, may stay there (X).
  • Replace the recovery email and phone if either belongs to the agency or to one person. Recovery details decide who gets back in after a lockout.

Step 7: re-check two-factor authentication

A Meta account can have up to five devices connected to two-factor authentication through an authentication app, and removing one "does not log it out" (Instagram). Open Meta Account, Login and security, Two-factor authentication, check each method, and turn off any the business does not control. Then end sessions as in step 6. For the business portfolio itself, Meta recommends turning on two-factor authentication before you share assets with a partner (Meta); the next agency starts from that.

What if the agency will not hand access back?

This is general information, not legal advice.

Start with a written request that lists each asset and the action you need. Meta asks you to contact the person with full control before filing a claim (Meta). If that fails, the platforms offer these routes.

  • Meta business portfolio that belongs to your business. Submit a full-control request. Eligible cases include a person with full control who is "a former employee or contractor with no ownership rights". You need identification, a document proving you own the business, and a signed attestation letter with the portfolio ID. File it through Business Support Home by choosing Business Manager admin dispute (Meta).
  • Facebook Page owned by the agency's portfolio. If you have full Facebook access to the Page: Page settings, Page setup, Page access, Request release under Business account access. The 30-day pending period and 72-hour grace period apply. Meta also notes that a Page linked with an Instagram account "cannot be approved by a business admin" (Meta). Without Page access, Meta's advice is to contact someone who has full control (Meta).
  • Google Business Profile. For a storefront or hybrid business, go to business.google.com/add, find the business and select Request Access; a service-area business contacts Google support instead. The current owner has 3 days to respond. After that you "may have the option to claim the profile", though Google says the option "isn't always available". A denial can be appealed (Google).
  • LinkedIn Page. On the Page, More, Request admin access. If the Page is actively managed, current super admins "must approve your request". If they do not respond, LinkedIn points you to its support, after you add the Page as your current employer on your profile and verify your work email where your company offers work email verification (LinkedIn).
  • YouTube on a Brand Account. If someone in your business has been an owner, not a manager, for 7 days or more, they can make themselves primary owner and then remove the agency (YouTube). Managers cannot change the primary owner, and the Google Account and YouTube help pages linked above describe no request form. Without an owner of your own, the agency has to act, which makes the contract your main lever.
  • TikTok Organization Account. It stays with the Business Center that created it. TikTok lists support contacts for Organization Accounts on its overview page (TikTok).

Which contract clauses prevent a hard offboarding?

Three clauses keep the next offboarding short: the business owns every account and holds the top role, the agency works through roles rather than shared passwords, and access is returned within a stated number of days after notice. The client onboarding checklist lists these with the rest of the contract terms. For setting up the next agency's access, how to give an agency access without sharing passwords has the lowest role that can publish on each platform.

Frequently asked questions

How do I remove agency access from my Facebook business account?

In Meta Business Suite, open Settings for your business portfolio, click Partners, then Options, Remove from business portfolio and Remove partner. You need full control of the portfolio. If Partners does not appear, you may not have full control. Then remove any agency staff listed under People and on each Page's direct access list.

Does changing the password remove the agency's access?

Not where the agency has a role. On X, delegates keep access after the owner changes the password. Roles are removed through each platform's role settings, and connected apps through its app settings. Change the password as well if it was ever shared.

How long does it take to get ownership back?

With a cooperative agency: about 7 days where Google holds the clock, since both Brand Account and Business Profile transfers involve 7-day conditions. A Facebook Page release takes at least 72 hours after approval, and the request expires after 30 days if nobody acts on it.

Will posts and review replies the agency made disappear?

On Google Business Profile, no. Google says a removed person's replies to reviews, posts and comments stay on the profile.

Sources

All read on 28 September 2026 and re-checked on 29 September 2026.