Topic starter
25/10/2026 11:06 am
TL;DR: Paid social and DSP permissions can survive employee exits, contractor completions, and agency handoffs, Cerby warns, because organisations verify the departure but not the removal of platform-level authority. Paid media governance needs asset-by-asset revocation and ownership checks inside each ad platform.
Editorial analysis by NHI Mgmt Group, based on content published by Cerby: “Why Paid Social Carries More Risk Than Organic (And How to Find the Gaps)”.
Key questions
Q: Why do ad accounts and DSP seats create more risk than organic social profiles?
A: Paid media roles can do more than publish content.
Q: What are the signs that partner access has gone stale in marketing platforms?
A: Look for sole administrators, unknown external users, active spend on accounts no one can explain, partner grants that still exist after an agency change, and roles that can edit budgets or billing without current business ownership.
Q: What breaks when paid social access is not removed after someone leaves?
A: The control that breaks is lifecycle enforcement inside the platform.
Practitioner guidance
- Inventory every paid media asset List each ad account, business portfolio, advertiser seat, and DSP instance, and record the owner, administrator, partner, and contractor access attached to each one.
- Revoke access in the platform of record Do not rely on HR offboarding or contract closure alone.
- Prioritise assets with spend authority Start with accounts that can change budgets, billing settings, audiences, inventory, or campaign delivery, because those roles create the highest operational and financial exposure.
Bottom line: Paid social and DSP permissions can survive employee exits, contractor completions, and agency handoffs even when corporate access has been disabled.
Glossary terms: Paid Media Access, Partner Grant, Orphaned Ownership, Lifecycle Offboarding
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 7 days ago by NHI Mgmt Group
27/10/2026 7:15 pm
Paid social access is an identity lifecycle problem, not a channel-specific annoyance. The article shows that the real issue is not whether a profile remains visible, but whether roles, partner grants, and advertiser seats remain active after the business relationship ends. That is a governance failure in the access lifecycle, and it belongs in the same control conversation as other privileged business systems.
A question worth separating out:
Q: Who is accountable for removing access when a contractor or vendor leaves?
A: Accountability should sit with the business owner who approved the access and the governance team that enforces the lifecycle workflow. If revocation is left to the departing user, the local manager or an informal reminder chain, access will often remain active too long. Clear ownership is essential.
👉 Read our full editorial: Paid social access persists after offboarding and agency changes
This post was modified 7 days ago by NHI Mgmt Group