# Connecting client social accounts to a scheduling tool, and what to remove when staff leave

A connection runs on the approval of whoever made it, so have the client's account holder connect it. When staff leave, check the tool, platform and connection.

Updated: October 16, 2026

Scheduling tools such as Buffer and Hootsuite queue posts for several social networks and collect the numbers in one place. A tool can post to a client's account because someone approved that on the social network. Who gave the approval decides what you need to remove when a staff member leaves.

## Whose approval keeps the connection running

To connect an account, a person signs in to the social network in the window the tool opens and approves the tool's access. Whose account gives that approval depends on the network and the method.

| Network and method | Account that approves | Where to end the connection |
| --- | --- | --- |
| Facebook Page | The personal Facebook profile of someone with full control of the Page | Business Integrations on that person's profile |
| Instagram, through its linked Facebook Page | Same as above | Same as above |
| Instagram, through an Instagram login | The client's Instagram account itself | In the scheduling tool |
| X | The client's X account itself | Apps and sessions in the client's X settings |
| TikTok | The client's TikTok account itself | In the scheduling tool |

For a Facebook Page, and for Instagram connected through its Page, the person connecting needs full control of the Page. Buffer's help center says you must be an Admin of the Page with Full Control, signed in to that person's own Facebook profile. Facebook Help says full control gives someone the same access as the original manager. They can remove anyone from the Page, including that manager, and they can delete the Page. The approval is tied to the personal profile of whoever connected it and appears in that profile's Business Integrations.

For Instagram through an Instagram login, and for X and TikTok, the approval comes from the client's own account. Connecting takes the client's username and password. After that, the connection doesn't depend on anyone knowing the password. X's developer docs describe one kind of access as lasting until it's revoked. TikTok's developer docs say a tool can renew its access without asking the user again, for up to 365 days. So a connection stays in place after the person who knew the password has left.

## Who should do the connecting

For the Facebook route, ask the person on the client's side who already has full control. If you give your staff full control just to connect a tool, more people can delete the Page or remove its managers.

For Instagram, X and TikTok, ask someone at the client to sign in and approve the tool themselves. Your staff then never need the password. Instagram's Terms of Use forbid trying to "solicit, collect, or use login credentials" of other users. X also lets the owner give others access without the password. Its Delegate feature lets the owner invite your staff as admins or contributors. They work from their own X accounts, without the password. See [agency access to X and TikTok business accounts](/guides/agency-accounts/x-tiktok-business-account-access).

Decide how the tool itself is set up, too. In Buffer, every user has their own organization, and channels connected there are visible only to them. A social channel can belong to only one Buffer organization at once. If a staff member connects a client's account to their own organization, your team's organization can't add it. So have staff invited into the company organization, signing in with their own Buffer logins. Inviting users needs Buffer's Team plan. Buffer describes inviting as the most secure way to give access, with no email address or password to share.

Hootsuite also works by members in an organization, with access granted per social account. Whichever tool you use, avoid one login for the whole team. If everyone signs in as one user, the tool can't show who scheduled what.

## Three places to check when someone leaves

The first is the scheduling tool's membership. Remove the person from your company's organization or team. In Buffer, you open Settings, then Team, and remove the user. Buffer leaves that person's queued posts, drafts and posts awaiting approval where they are. Review them and pick who takes them over. In Hootsuite, an admin opens Members under Social accounts and teams and deletes the member from the organization, which also removes them from its teams. Hootsuite can also take a member off a single social account and leave them in the organization. If the person owns the Hootsuite organization, ownership has to move to someone else before they can be removed.

The second is the network itself. Remove whatever access the person had there, such as their Facebook Page access ([how Meta business portfolios handle agency access](/guides/agency-accounts/meta-business-portfolio-agency-access)) or their X Delegate role.

The third is the connection. If the tool runs on that person's Facebook approval, the connection belongs to their profile. Neither Facebook's nor Buffer's help pages say whether the connection keeps working once that person loses Page access. So have the client's full-control person reconnect the tool before you remove the staff member's access. If the person knew the client's Instagram, X or TikTok password, ask the client to change it. On X, changing the password doesn't remove connected apps, because X Help treats revoking an app and changing the password as separate steps. Under Apps and sessions, the client should revoke any app your team doesn't use and log out sessions it doesn't recognize. Afterward, check that each connection still works.

Buffer shows a channel as Unavailable when another Buffer organization holds it. Its help center suggests checking with past social media managers and current or former team members. The rest of a staff change is in the [account handover checklist](/guides/agency-accounts/handover-checklist).

## When the contract ends

Export anything the client wants to keep, because Buffer warns that disconnecting a channel removes its posts, analytics and data for good. Then remove the client's channels from your organization and ask the client to end the connections on its side.

On Facebook, the person who approved the connection removes the tool under Business Integrations. Facebook Help says the tool then can't manage the client's ads, Pages, groups, events or messages. It also says the tool may still hold information shared before removal. On X, the client revokes the tool's access under Apps and sessions.


## Frequently asked questions

**Who should connect a client's Facebook Page to a scheduling tool?**

Someone on the client's side with full control of the Page. Full control also lets a person delete the Page and remove other managers, so it's not worth giving to your staff just to connect a tool.

**Do scheduled posts disappear when we remove a staff member from Buffer?**

No. Their queued posts, drafts and posts awaiting approval stay where they are. Posts and analytics are deleted when you disconnect the social channel itself from Buffer.

**Can our team share one login to the scheduling tool?**

Invite each person instead. Buffer calls inviting users the most secure way to give access, with no password to share. With one shared login, you can't tell who scheduled what.

**Does changing the client's X password disconnect the tool?**

Don't count on it. X treats revoking an app and changing the password as separate steps. Under Apps and sessions, revoke apps you don't use and log out unknown sessions.

## Sources

- [Facebook Help Center: How do I edit the privacy and settings for my business integrations or remove them from Facebook?](https://www.facebook.com/help/405094243235242)
- [Facebook Help Center: About Page access](https://www.facebook.com/help/289207354498410)
- [Instagram Help Center: Terms of Use](https://help.instagram.com/581066165581870)
- [X Help Center: About third-party apps and log in sessions](https://help.x.com/en/managing-your-account/connect-or-revoke-access-to-third-party-apps)
- [X Help Center: How to use the Delegate feature](https://help.x.com/en/managing-your-account/how-to-use-the-delegate-feature)
- [X Developer Platform: OAuth 2.0 Authorization Code Flow with PKCE](https://docs.x.com/resources/fundamentals/authentication/oauth-2-0/authorization-code)
- [TikTok for Developers: User Access Token Management](https://developers.tiktok.com/doc/oauth-user-access-token-management)
- [Buffer Help Center: Troubleshooting Facebook connections](https://support.buffer.com/articles/troubleshooting-facebook-connections-9RFdJRZF2s)
- [Buffer Help Center: Connecting your Instagram account to Buffer](https://support.buffer.com/articles/connecting-your-instagram-account-to-buffer-n9Ad6veXsu)
- [Buffer Help Center: Adding users and setting up permissions](https://support.buffer.com/articles/adding-users-and-setting-up-permissions-ixjiLpe2fd)
- [Buffer Help Center: Removing a user from your organization](https://support.buffer.com/articles/removing-a-user-from-your-organization-m2wOKYJPtf)
- [Buffer Help Center: "Unavailable" channels are likely connected to another Buffer organization](https://support.buffer.com/articles/unavailable-channels-are-likely-connected-to-another-buffer-organization-rzvDUV7uBX)
- [Buffer Help Center: Disconnecting a channel from Buffer](https://support.buffer.com/articles/disconnecting-a-channel-from-buffer-33vFDqJJjv)
- [Hootsuite Help Center: Remove a member from a team or account](https://help.hootsuite.com/hc/en-us/articles/1260804307769-Remove-a-member-from-a-team-or-account)

## How Junify handles this

**Doing this by hand** You agree with each client on how access is handed over, add and remove people platform by platform whenever staff change, and keep track of which staff member used which client's account.

**With Junify** For X and TikTok accounts where staff still sign in with the client's username and password, every departure means asking the client for a new password. With Junify, you change the password with the client at setup and only Junify holds it. Staff sign in through Junify without seeing it, and each sign-in is recorded. Remove someone's access in Junify and they can't sign in again.

Junify is an access management service for handing work in your web accounts to employees, contractors and outside teams without giving them the password. Each person verifies on their own phone and clicks a card to sign in. The password is never shown, and Junify records who used which account and when.

- [Try the demo](https://www.junify.com/bpo/try?lang=en&scenario=marketing-ops&from=guide&cluster=agency-accounts&slug=sns-scheduling-tools-client-accounts)
- [Book a 30-minute demo](https://www.junify.com/bpo/demo)

## More on this topic

- [Account clauses an agency should propose in its client contract](/guides/agency-accounts/account-clauses-for-service-providers): Propose five: account handover, who may use accounts, records, incident notice, and offboarding. Keep your own promises apart from what the client must do.
- [How to write client account handling into your agency's security policy](/guides/agency-accounts/agency-security-policy-for-clients): Write a short public policy, an internal policy for staff, and an access summary for each client. Rewrite template rules for logins the client owns.
- [Amazon Seller Central user permissions, and how to give an agency access](/guides/agency-accounts/amazon-seller-central-user-permissions): Seller Central Help says not to share logins. On a Professional plan, the seller invites staff as employees and authorizes your agency as a Service Provider.