Here’s a concise, role-based checklist for YouTube, Instagram, and Facebook to set up contributors (post/photo upload) and a moderator role, while restricting who can access DMs/chats. Each platform supports granular roles; the key is assigning least-privilege roles and turning off messaging access for most users.

YouTube checklist

• Confirm channel permissions are enabled: YouTube Studio → Settings → Permissions; if prompted, migrate from legacy Brand Account users to channel permissions.
• Invite contributors: Permissions → Invite → enter Google Account email → choose Editor (or Editor limited to hide revenue) for uploading/editing; avoid Manager unless they must manage roles.
• Add moderator: If moderation is needed for comments/live chat, grant Manager or Editor and configure moderation tools in YouTube Studio (Community settings: blocked words, moderators for live chat).
• Verify/adjust access anytime: Settings → Permissions → change role or Remove access; invitations expire if not accepted in 30 days.

Instagram checklist

• Convert to business account and link to Facebook Page: This enables role-based access via Meta Business Suite for Instagram assets.
• Open Meta Business Suite → Settings → Users → People → Invite People; select Partial Access (not Full Control) and assign only the Instagram asset with Content permissions for posting/photos.
• Restrict DM access: In Instagram’s “Manage access to messages across apps,” keep “Allow access to messages” turned off for Business Suite unless select staff require inbox visibility; enable only for specific users/teams.
• Add moderator with limited chat access: Assign a person Content + Community permissions only if they must manage comments; avoid granting Messaging unless they must read/reply to DMs.

Facebook checklist

• Use New Pages Experience via Meta Business Suite: Go to Settings → People; invite users with Partial Access and select only the Page asset they need.
• Set contributor (posting) role: Assign Content permission for the Page; do not toggle Messaging for these users so they can post and schedule without seeing the Inbox.
• Set moderator role with chat access: Assign Community + Messaging permissions to the moderator; avoid giving Full Control or Admin unless required for governance.
• Audit and adjust: Review access regularly in Business Suite; remove or downgrade roles when tasks change to maintain least-privilege.

Notes and guardrails

• YouTube supports inviting any Google Account; assign Editor/Editor (limited) for uploaders, and keep Manager to a minimum for security and auditability.
• Instagram DM visibility is controlled separately; message access can be disabled globally or scoped to specific people through Business Suite and Instagram message access settings.
• Facebook Page access lets you granularly toggle Content, Messaging, Community activity, Ads, and Insights per person under Partial Access—use this to keep chats restricted to moderators only.