Skip to main content

Managing Employee Protection & Access (Admin Guide)

A guide for employers to secure social media access and control offboarding

Written by Ron Storfer
Updated over 3 weeks ago

Introduction

Monitoring who has access to your social media accounts — and making sure they’re properly protected — is critical for preventing hacks, unauthorized access, and account misuse.

Spikerz helps you do this by matching organization users to real people and their social accounts, so protections and access revocation work automatically.

This guide walks you through the setup.


Why This Matters

  • Ensure every employee with access is properly protected

  • Prevent former employees from keeping access

  • Get visibility into each employee’s security status

  • Automate access revocation with SCIM (if enabled)


Step 1: Go to the Permissions Page

  1. Log in to Spikerz

  2. Navigate to Permissions

  3. Locate the Protection Status column


Step 2: Open the Protection Status Modal

  1. In the Protection Status column, click the Set protection button next to a user

  2. This opens a modal that asks you to match the organization user with a Spikerz member

What is a member?
A member is an Admin or Member inside Spikerz.


Step 3: Match the User to the Correct Person

Matching ensures the right employee is connected to the right social account.

This is important because names may differ across platforms.

Example:

  • Organization user: David Glinch

  • Facebook name: David Kumar

Spikerz uses this step to confirm they are the same person.

In the modal, you can:

  • Select an existing Spikerz member

  • Invite a new member

  • Assign more than one social account to the same Spikerz member

Once selected, click Match to continue.


Step 4: What Happens After Matching

Once the match is completed, employee protection is opened to the user, but it is not automatically activated.

From an admin perspective, three important things happen:


1. Protection Is Opened to the Employee (Not Yet Activated)

After matching, the Protection Status changes from a button to “Not protected.”

This is an expected and positive state.

It means:

  • The employee is successfully matched to a Spikerz member

  • Protection is now available for the employee to set up

  • The employee can start securing their personal social account

At this stage, no action is required from the admin.

2. Admins Can Track Protection Progress

Once protection is open, admins can monitor how the employee progresses with securing their account.

As the employee completes setup, you’ll see updates for:

  • Secured email

  • Secured phone

  • 2FA

  • Account lockout and password rotation rules

This gives admins full visibility without forcing the setup on the employee.

3. Access Control Is Enforced (SCIM Customers)

If SCIM is enabled, the match immediately enables access control — regardless of protection status.

This means:

  • The user is officially mapped to their social accounts

  • When the employee leaves the organization:

    • Facebook access is automatically revoked

    • Admins are notified to remove access from additional platforms

This ensures secure and automated offboarding even if the employee has not completed protection.


What Employers Can See After Matching

Once matched, you’ll see security visibility per employee:

  • Secured Email
    Shows whether the user activated Spikerz’s secured and monitored email

  • Secured Phone
    Shows whether the user is using a secured phone number provided by Spikerz

  • 2FA
    Indicates whether the user enabled Spikerz’s two-factor authentication

  • Account Lockout
    Shows whether the user enabled personal account protection, including automated password rotation rules


Summary

By matching users:

  • You unlock employee-level protection

  • You gain visibility into security posture

  • You reduce risk from unmanaged access

  • You automate offboarding security (with SCIM)

Did this answer your question?