Knowing exactly who can post, comment, and run ads from your brand’s Facebook Page is one of the most fundamental parts of social media security. It’s not just about preventing a rogue post, it’s about protecting your brand’s reputation and maintaining control of your digital assets. This guide will walk you through exactly how to see who has access to your Facebook Page, remove outdated permissions, and set up your team for success.
Why Is It So Important to Check Who Has Page Access?
You’ve poured countless hours into building your brand’s presence on Facebook. Leaving the keys unattended is a risk you don't need to take. A regular audit of who has access to your Page is a non-negotiable task for any social media manager or business owner. It solves a few critical problems:
- Prevents Unauthorized Access: The most obvious reason. Former employees, contractors, or agency partners who still have access can become a significant security liability. A simple mistake - or something worse - can damage your brand's reputation instantly.
- Clarifies Team Roles: When five different people have 'Admin' access, it’s not always clear who is responsible for what. Reviewing roles helps you enforce a proper workflow. Who is in charge of running ads? Who handles community management? Who approves the content schedule? Assigning clear roles based on responsibilities makes your team more efficient.
- Protects Against Account Takeovers: If a team member’s personal Facebook account is compromised, and that account has admin access to your Page, hackers could take over your business presence. By limiting high-level permissions, you reduce the blast radius of a potential security breach.
- Keeps Your Tools Tidy: It’s not just people, third-party apps also have access. Remember that sketchy app you connected three years ago for a giveaway? It might still have permission to post on your Page. Auditing app permissions is just as important as auditing people.
In short, think of it as changing the locks. It’s basic housekeeping that protects your valuable asset and brings order to your workflow.
Understanding Page Access: New Pages Experience vs. Classic Pages
Facebook has been rolling out the "New Pages Experience," which completely changes the structure of Page management. How you check permissions depends on which version your Page is using. The new experience treats a Page more like a separate profile you switch into, while the classic version used a tiered system of roles.
The New Pages Experience: It's All About "Access"
The updated model ditches the old "Page Roles" for a more straightforward "Page Access" system. You either grant someone access to manage the Page directly on Facebook or access via tools like Meta Business Suite.
- People with Facebook access: This is the highest level of permission. Anyone on this list can switch from their personal profile to the Page profile and manage it directly on Facebook. They can post content, respond to messages, create ads, and see insights. You can also grant them full control, which allows them to add or remove other people - the equivalent of the old "Admin" role.
- People with task access: This is a more limited role for those who work behind the scenes. They manage the Page using tools like Meta Business Suite or Creator Studio but cannot switch into the Page directly on an active Facebook session. Their permissions are specific to tasks like creating ads, viewing insights, or managing comments. This is ideal for specialists who don't need to post as the Page directly.
- Community Managers: This is a specific role under "task access" focused entirely on moderation. They can delete comments, suspend or ban people, and manage activity in your community.
The Classic Pages System: The Original Page Roles
If your Page hasn't been updated yet, you'll still be working with the legacy system of Page Roles. This setup had a clearer, multi-tiered hierarchy of permissions.
- Admin: The master key. They can manage all aspects of the Page, including adding and removing other people, changing Page roles, settings, and deleting the Page itself. Be extremely careful who you grant this to.
- Editor: Can do everything an Admin can do except manage other admins and page settings. They can create and delete posts, send messages, run ads, and view insights. This is often the appropriate role for your primary social media manager.
- Moderator: A community-focused role. They can respond to and delete comments, send messages as the Page, and see who created a post. They cannot create original content. Ideal for team members in charge of engagement.
- Advertiser: Can only create ads, view insights, and see who published a post. They can't post content or respond to comments. Perfect for your ad agency or paid media specialist.
- Analyst: A read-only role. They can view insights and see who created posts, but that's it. This role is great for stakeholders or team members who need to pull reports without having the ability to change anything.
Step-by-Step Guide to Seeing Page Access (New Pages Experience)
If your page uses the new design (where you "switch" into your Page's profile), follow these simple steps to perform an access audit.
- Switch to Your Page Profile: Click on your profile picture in the top-right corner of Facebook and select "See all profiles." Then, choose the Page you want to manage.
- Access Your Professional Dashboard: Once you're managing as your Page, click your Page's profile picture again in the top-right and select "Professional Dashboard" from the dropdown menu. You can also find a "Manage" button directly on your Page's main view.
- Navigate to "Page Access": On the Professional Dashboard, look at the left-hand navigation menu. Scroll down under "Your tools" and find and click on Page Access.
- Review the Access Lists: You'll now see a screen that clearly lists everyone who has access. It's broken down into informative sections like:
- People with Facebook access: The main list of managers. Facebook will also tell you which of these individuals has "full control."
- Community Managers: This list shows anyone assigned the specific moderation role.
- People with task access: If you've assigned specialized roles via Business Suite, they'll appear here.
- Business accounts with access: This often-overlooked section shows partner businesses or agencies that have been given access through Meta Business Manager.
From here, you can click the three dots next to anyone's name to Change access level or Remove access entirely. Simple as that.
Step-by-Step Guide to Seeing Page Access (Classic Pages)
If your page still looks and feels like it did a few years ago, you're likely on the classic version. Checking roles here is just as easy.
- Go to Your Facebook Page: Navigate to the Page you want to manage from your personal account.
- Open Page Settings: Look for the "Settings" tab in the left-hand menu toward the bottom. Click it.
- Select "Page Roles": Within the general settings menu, click on Page Roles. This will be about halfway down the options list.
- Review Existing Page Roles: The next screen will display a detailed list of every person who has a role on your Page, along with their assigned role (Admin, Editor, Moderator, etc.).
Here, you'll see a clear breakdown of every individual and Business Manager account with access. To remove someone, simply click the "Edit" button next to their name and then select "Remove."
Remember to Check Business Integrations and Apps
A complete security audit goes one step further. People and agencies aren't the only ones with access to your Page - third-party applications do, too. Think scheduling tools, contest apps, or social inbox providers.
It's smart to review these at least once a quarter to remove any services you no longer use.
- From your personal Facebook profile, click your profile picture in the top-right.
- Go to Settings & Privacy >, Settings.
- On the left-hand menu, scroll down and find Business Integrations.
- Review the list of "Active" apps. This list shows every single tool that connects to your Facebook account and has access to one of your Pages.
- If you find an application you no longer recognize or use, click on it and select Remove. This immediately revokes its permissions to access your Page data or post content.
Best Practices for Securely Managing Page Access
Knowing how to see who has access is the first step. The second is managing those permissions wisely.
- Schedule Regular Audits: Set a calendar reminder to review your Page roles and Business Integrations every quarter. This proactive habit takes 15 minutes and can save you from a major headache down the line.
- Embrace the Principle of Least Privilege: Don't give everyone Admin access just because it's easy. Grant each team member the lowest level of permission they need to do their job effectively. Your content creator might just need Editor access, and your community manager only needs Moderator permissions. Reduce the number of Admins to an absolute minimum.
- Create a Powerful Offboarding Process: When an employee or contractor leaves your company, removing their Page access should be at the top of your exit checklist, right next to disabling their email. The moment they're officially gone, their access should be, too.
- Use Meta Business Suite for Teams: Instead of adding personal Facebook profiles directly to a Page, a more professional approach is to manage access through Meta Business Suite (formerly Business Manager). This keeps a clean separation between personal accounts and professional responsibilities and makes managing team permissions much easier.
Final Thoughts
Performing a quick audit of who has access to your Facebook Page isn't a technically difficult task, but it’s one that’s critically important for keeping your brand secure and your team efficient. By knowing how to check permissions in both the New Pages Experience and the classic view, you're empowered to take full control of your valuable social media asset.
Once you’ve got your team's access organized, the next step is empowering them with a tool that helps them do their best work without friction. Having managed busy social teams ourselves, we know that clunky, outdated software can create as many workflow problems as poor permissions. We purpose-built Postbase to streamline social media management, especially for modern team roles. With features like our unified calendar for planning and a central inbox for handling all your comments and DMs, your team members can effectively execute their roles without ever needing access they shouldn't have in backend settings.
Spencer's spent a decade building products at companies like Buffer, UserTesting, and Bump Health. He's spent years in the weeds of social media management—scheduling posts, analyzing performance, coordinating teams. At Postbase, he's building tools to automate the busywork so you can focus on creating great content.