← Agency Answers

What happens to social media accounts when an employee leaves?

Verified and kept current by the Cloud Campaign team
Quick answer

Remove their platform access the day they leave, before or during the exit conversation. With authorized connections, deactivating one user ends their access to every client at once, with no password changes needed. Then audit what they held directly: page roles, ad account access, and any client-side credentials.

Offboarding is where the password-sharing decision made months earlier either pays off or bites. Agencies running on authorized connections handle a departure in minutes; agencies running on shared credentials spend a week rotating passwords across every client and hoping they did not miss one.

The same-day checklist

Deactivate the person's login to the social management platform, which cuts access to every client workspace simultaneously. Remove them from any client Business Manager or page roles they hold personally, since those are granted outside your platform and survive its removal. Revoke access to shared drives, the password manager, and any ad accounts. Reassign their approval responsibilities so nothing sits waiting on a person who no longer works there, which is the most common operational fallout of a departure.

The part agencies forget

Personal platform roles are the leak. If an account manager was added as an admin on a client's Facebook page under their own personal profile, removing them from your tools changes nothing about that. Keep a record of which staff hold direct roles on which client assets, and audit it at every departure. A quarterly review of page roles across clients catches the stragglers from previous exits, which almost every agency discovers it has on the first pass.

Prevention beats cleanup

Two habits make offboarding routine: connect client accounts through the platform rather than through individual staff profiles wherever possible, and keep every person's access flowing through their own named login. Cloud Campaign includes unlimited users on every plan, so per-person logins never carry a cost penalty, and authorized connections mean no client password ever has to change because an employee left.

Tell the client when it matters

For departures involving a client's primary contact, a short proactive note that their account team is changing and access has been updated builds more confidence than silence. Clients rarely worry about turnover; they worry about turnover they discover accidentally.

See how it works in Cloud Campaign

Cloud Campaign is the white-label social media management platform built for marketing agencies. Every plan includes unlimited users and our full suite of time-saving tools, so you only pay more when you take on more clients.

Start your free 14-day trial
See plans and pricing

More in this topic

Does an agency need SSO for social media management?

Most agencies do not need SSO, but it becomes valuable past roughly fifteen to twenty staff or when enterprise clients require it in security reviews. Cloud Campaign includes SSO on the Agency plan, so it is available when a team's identity management or a client's procurement process starts demanding it.

How do agencies keep client data separated?

Through structural separation: each client gets its own workspace containing their accounts, content, calendar, analytics, and authorized users, with no shared surfaces between clients. Cloud Campaign is built on this workspace model, so one client's data is never visible from another client's workspace.

How does 2FA work with shared social media accounts?

Two-factor authentication and shared logins conflict by design, since the code goes to one person's device. The fix is to stop sharing logins: connect client accounts to a management platform through platform authorization and give each person their own login, so 2FA protects the client's account without blocking the team.

How do you prevent posting to the wrong client account?

Use structural separation rather than care: keep every client in its own workspace so the wrong account is not selectable from the right screen. Cloud Campaign's workspace model does exactly this, isolating each client's accounts, content, and calendar, which removes the dropdown-mistake risk entirely.