Governance

Signs your agency has too much access

The specific red flags that an agency holds more power over your Facebook assets than the work requires — and what each one means for whether you can walk away cleanly.

A good agency makes your marketing easier. The trouble starts when the access they hold quietly outgrows the job. The test is simple: if the relationship ended tomorrow, could you remove them and keep everything — your Page, ad account, Pixel, and the data inside them — without their cooperation? If you are not sure, one of the red flags below probably applies.

If your situation is actually …

The core distinction: partner, not owner

An agency should be a partner to your assets, not the owner of them. Partner access lets them work on the specific Pages and ad accounts you grant, and it can be removed by you at any time. Ownership is different: the Business Portfolio that owns an asset controls it outright, including who else gets access. An agency that owns your portfolio is not a partner — they are the landlord, and you are renting your own Page.

Everything below is a variation on that one idea. Each red flag is a place where the agency holds control that should sit with your business.

Red flags — any one of these is worth acting on

What each red flag actually costs you

  • They own the portfolio

    If your assets sit inside the agency's Business Portfolio, they control the container that holds everything. They can grant or revoke your access, and you cannot simply take ownership back — you would need them to move the assets to your portfolio, which requires their cooperation.

    Why it happens: The agency created the portfolio during onboarding and it was never moved to the business.

    Already happened: Why your business should own its Business Portfolio

  • They have Full control of the Page

    Full control lets the agency add and remove other people, change settings, and delegate the Page. That is far more than running campaigns needs. The risk is that they can remove your access — including by accident during staff turnover.

    Why it happens: Full control was the quickest thing to grant, so it became the default.

  • They created the ad account or Pixel

    An ad account created inside the agency's portfolio is owned by the agency. You can be given access to use it, but an ad account's owning portfolio cannot simply be transferred to you — separating cleanly usually means standing up a fresh ad account under your own portfolio and rebuilding. The same caution applies to a Pixel they own: plan for a rebuild rather than a hand-over.

    Why it happens: It was faster for the agency to create the account in their existing setup than to use yours.

    Already happened: Our agency created our ad account — how do we own it?

  • You are a user in their setup, not the other way around

    When you are added as a user inside the agency's portfolio, your access depends entirely on them. The correct shape is the reverse: your business owns the portfolio and adds the agency as a partner with access to named assets you can revoke yourself.

    Why it happens: The relationship was set up from the agency's side, so their portfolio became the centre.

Common questions

Not by yourself. Whoever owns the Business Portfolio controls it, so moving your Page and accounts into a portfolio you own needs the agency to cooperate with the transfer. Start the conversation early and document what should move. For an ad account specifically, be prepared that its owning portfolio generally cannot be reassigned — the realistic path is partner access now and a clean rebuild under your own portfolio over time.

Delvia

Access issues are easier to prevent when roles, owners, and responsibilities are recorded clearly

Most access problems trace back to the same gap — no clear record of who has access, what role they hold, and what should happen when that changes. Delvia helps you keep that record so problems are visible before they become incidents.

Delvia is free on iPhone and Android. Keep a clear record of who has access to your accounts — and what to do when that changes — wherever you are.