Governance

Best Instagram Access for Creators, Agencies, and Employees

Match the right access to each relationship: scoped roles for employees, Partner access for agencies, and clear business ownership for creators. A role-by-role guide.

There is no single "best" Instagram access — there is the right access for each kind of relationship. An employee, a freelance agency, and the creator who owns the brand each need something different. Get the match right and you get smooth collaboration with no one holding more than they should.

Access by relationship

The safe pattern for each of the three relationships, all without sharing a password.

  1. Principle 1

    Employees — scoped roles

    Add them to the Business Portfolio and give only the Instagram permissions their job needs: content, messaging, ads, or insights. Remove the role when they leave.

  2. Principle 2

    Agencies — Partner access

    Bring an agency in as a Partner by their 16-digit Business Portfolio ID, granting access to specific assets. Never the password, never ownership of your portfolio.

  3. Principle 3

    Creators / owners — keep ownership

    The business (or the creator running it) owns the Business Portfolio and connected Page. Everyone else gets access through it, so control never leaves your hands.

Review cadence: Review each relationship's access quarterly and whenever the relationship changes.

Instagram permissions you can assign

These are the permissions you grant on the Instagram asset in Meta Business Suite. Pick the narrowest set per person.

RoleWhere it livesCan doCannot do
Business Portfolio — Admin access
Can delegate to others
business.facebook.com → Settings → People
Entire Business Portfolio
  • Manage all assets, people, partners, and billing
  • Grant Admin or Employee access to others
  • Delete the portfolio
Portfolio Admin is the highest privilege — protect this role tightly.
Business Portfolio — Employee access
business.facebook.com → Settings → People
Only assigned assets
  • Work on specific assets they are explicitly granted
  • Access assets they are not assigned to
  • Add new people to the portfolio
Instagram asset — Full control
Can delegate to others
business.facebook.com → Accounts → Instagram accounts → Assign people
Specific Instagram account
  • Manage everything on the Instagram account
  • Reassign or revoke other people on this asset
  • Connect / disconnect from other Meta assets
Instagram — Create content
Asset-level Instagram permissions
Posting and content
  • Create posts, stories, reels
  • Edit drafts
  • Run ads
  • Reassign people
Instagram — Messages & community activity
Asset-level Instagram permissions
Inbox and community
  • Read and reply to DMs, comments, mentions
Instagram — Community activity
Asset-level Instagram permissions
Comments and mentions only
  • Reply to comments and mentions
  • Access DMs
Instagram — Ads
Asset-level + Ad Account permissions
Boosted posts and ad campaigns
  • Run ads tied to this Instagram account
Ad permission typically also requires Ad Account access — a common point of mis-grants.
Instagram — Insights
Asset-level Instagram permissions
Read-only
  • View account insights and content performance

Full control should be rare — reserve it for trusted admins, not every collaborator.

Common mismatches

  • Giving an agency full control instead of Partner access

    Full control or ownership lets an agency lock you out. Partner access by Business Portfolio ID gives them what they need and keeps you in charge.

    Already happened: Best way to give an agency access

  • Treating every employee as an admin

    Admin is for the few people who manage access itself. Most employees should be scoped Employees on the assets they work on.

Delvia

Access issues are easier to prevent when roles, owners, and responsibilities are recorded clearly

Most access problems trace back to the same gap — no clear record of who has access, what role they hold, and what should happen when that changes. Delvia helps you keep that record so problems are visible before they become incidents.

Delvia is free on iPhone and Android. Keep a clear record of who has access to your accounts — and what to do when that changes — wherever you are.