Agency ad account access: roles, ownership and handover

Separate people, partners and business assets

Your ad account, Facebook Page, Instagram account, dataset and catalog are different assets. A team member may need one without needing all the others. Meta’s business portfolio training includes managing users, accounts, permissions and security; these decisions should be deliberate.

Start with a table containing the asset name, ID, owner, operational user and required task. Do not place passwords, recovery codes or identity documents in that table. The goal is a map of responsibilities, not a shared credential file.

Request permissions for the work being done

Use the authorized access mechanisms available for the relevant business and asset. Ask what level of control is required for campaign work, reporting, billing or user management. Our recommendation is to give each person only the access needed for their assigned responsibility.

For example, someone reading campaign results may not need to change billing or invite more users. Agree on the desired task first, then verify the available permission options in the current interface. Role names and capabilities can differ between asset types.

Prepare a handover record

Before the first campaign, record which assets belong to your business and which remain under a supplier arrangement. Ask what happens to campaigns, reports, balances and connected assets if either party ends the service. Do not assume that access and ownership are interchangeable.

Keep an authorized contact for billing questions and another operational owner if your team requires one. Confirm who will approve changes, who can restore access and how support will verify an access request.

• Account ID and the agreed scope of access.
• Page, Instagram, dataset and catalog ownership.
• People allowed to approve permission changes.
• Reports and records to retain for the advertiser.
• The procedure for removing access at the end of the service.

Keep credentials and recovery information private

Use individual access and appropriate account security wherever supported. Meta includes two-factor authentication in its business portfolio security training. Store recovery information with the person or organization responsible for the account, rather than in a shared sales conversation.

Treat unexpected requests for a password, login code or recovery code as a reason to verify the request through a known channel. A Telegram display name alone does not establish that a message came from your usual contact.

Confirm the actual delivery arrangement

Different account offers can involve different operating arrangements. Before payment, ask the supplier to describe the access you will receive and any limitations relevant to your team. Do not infer those details from labels such as premium, tier or agency.

Elite Ecom supplies agency accounts and support, while you manage campaigns. Share your existing assets and the roles your team needs on Telegram. The agreed arrangement should be clear before account delivery and before you allocate advertising funds.