Governance

The Agency Still Has Access After Offboarding

If an agency can still reach your Instagram after offboarding, the access is coming from somewhere you missed — partner assignments, lingering staff, or the connected Facebook Page. Here is each path to close.

When an agency still has access after you removed them, it is almost never a glitch — it is access through a route you did not check. There are only a few places it can be coming from. Walk each one and close it.

If your situation is actually …

Where the lingering access is coming from

Match what you are seeing to the route the agency still has in.

What you’re seeingLikely causeWhat it usually means
They can still post or manage the InstagramTheir Business Portfolio is still a Partner on the assetThe Partner relationship was not fully removed — remove it under Settings → Partners.
A specific agency person still has accessThey were added individually under People, not via the PartnerRemove that person directly under Settings → People.
They can reach the inbox or boost posts but not settingsAccess is coming through the connected Facebook Page or ad accountRemove their access on the Page and ad account too.
They are logging in as the account itselfThey were given the Instagram password at some pointChange the password and end all sessions — role removal does not revoke a known password.

Work down the list; more than one route can be open at once.

Close every remaining route

Common questions

They most likely still have an active login session or access through the connected Page. Ending all sessions and removing their Page access closes those routes. Then re-audit to confirm.

Delvia

Access issues are easier to prevent when roles, owners, and responsibilities are recorded clearly

Most access problems trace back to the same gap — no clear record of who has access, what role they hold, and what should happen when that changes. Delvia helps you keep that record so problems are visible before they become incidents.

Delvia is free on iPhone and Android. Keep a clear record of who has access to your accounts — and what to do when that changes — wherever you are.