Spikerz’s Permissions Management feature helps you review, monitor, and manage all users who have access to your organization’s social media accounts. It provides a centralized view across platforms, highlights risky users, and gives you actionable insights to prevent unauthorized access.

With this feature, you can:

Step 1
In your Spikerz dashboard, go to "All assets", and tap on the "Asset permissions" button.

Step 2
You’ll land on a full overview of all users with access to your organization’s connected social media platforms.

To give someone access to your accounts from Spikerz, see How to Invite People to Your Social Accounts.

Each row displays the following details:

You’ll also see:

People often join each social account with a different email or name. Click a user to see which email and name they use on each asset.

For Facebook Pages, Instagram, and WhatsApp accounts managed through a connected Meta business, Spikerz fills in a missing email from the same person on the business. The email appears after the next scan.

Pending invitations show no email or name until they are accepted. System users, partners, LinkedIn pages, and Meta business accounts never show No email registered, because they don’t carry an email.

In the Asset View, click an asset to see the Registered with: email under each user who has access to it.

You can switch between:

Spikerz provides predefined filters to help you quickly search, review, and manage users and assets within your environment.

These filters allow administrators to easily narrow down large lists and focus on the most relevant users, permissions, or potential security risks.

You can refine your view using the following filters:

Click Export to download the permissions list as an Excel (.xlsx) file. Choose the accounts to include under Select accounts. The filters on the page also apply, so the file matches what you see.

For details, see Exporting your data to Excel.

Before anything is removed, Spikerz shows which access Will be removed, which Cannot be removed by Spikerz (remove it in the platform itself), and which needs you to Reconnect to remove. Once removed, the person immediately loses that access.

Spikerz categorizes users based on how they access and interact with your social media assets. Understanding these user types helps administrators quickly identify the origin of access and manage permissions more effectively.

A Partner User represents an external organization or partner that has been granted access to your assets through a business integration.

These users typically belong to agencies, marketing partners, or third-party service providers that manage or support your social media accounts. Their access is usually granted through official platform partnerships or business integrations.

Administrators should periodically review partner access to ensure only active and trusted partners retain permissions.

A System User is a non-human account created for automated systems, integrations, or applications.

These users are commonly used by tools, APIs, or automated services that need access to assets without requiring a personal login. System users allow platforms and services to perform tasks such as publishing content, collecting analytics, or managing integrations.

Because system users operate automatically, it is important to review their permissions regularly and ensure they are connected only to trusted systems.

A Private User is a standard individual account belonging to a person who has been granted direct access to your assets.

This type of user typically represents employees, administrators, or collaborators who log in using their personal account credentials.

Private users should always be reviewed carefully to ensure that access reflects the user’s current role within the organization.

To provide better visibility and clearer access management, Spikerz introduces special user statuses that help identify users who may require review.

Users who are not recognized in the current approved user list will automatically receive an Unauthorized User badge.

This status highlights accounts that may have access but are not part of the known or approved user list.

If you recognize the user, you can easily approve them by selecting “Authorize User.”

The Former Employee status is applied when Spikerz receives confirmation through SCIM that an employee has left the organization.

Once this status is triggered, Spikerz will automatically remove the user’s access from supported platforms when possible (such as Facebook assets), helping ensure former employees no longer retain access to company accounts.

If Spikerz detects suspicious activity, such as unusual login behavior or security alerts related to the account, the user will be flagged as a Compromised User.

This status helps administrators quickly identify accounts that may be at risk and require immediate review.

On each asset page, you can access the Asset Permissions section. From there, open the Settings tab to configure security and access monitoring for that specific asset.

Within this settings page, you can activate several important security tools:

To use the same settings on many assets at once, select All assets or a collection, and open the Settings tab. A change there applies to every asset in the view. For details, see Managing settings for All assets and collections.