Managers are given accounts for forums, social networks, how to protect accounts? Creation of a gate or..?

Question

Programming

There are forums, social networks with accounts belonging to the company.
These accounts are issued to managers who work remotely, turnover, etc. There is a question of account protection.
Not everywhere there is a password change via email confirmation.
How to protect accounts from their users, managers?
You can make some kind of gate site or browser plugin so that our gate is already logged in, and not the user himself.
Any ideas on how this can be technically implemented?

Answer 1

1. a clumsy solution, it doesn’t work everywhere and is quite hemorrhoidal: you tie the company’s mobile phones to all accounts and enjoy life, and give out only passwords to managers.
+: relative ease of implementation
- : need a lot of valid numbers; probably not all social networks support such a binding; the solution cannot be automated
2. Stick somewhere Linux / bzd (or multi-user [== supporting simultaneous multi-logins] Windows), in it for each new manager you create a user and a vnc session for this user with a bare browser, log in yourself, wherever necessary and remember the password. Managers are given only access to their personal vnc session.
+: easy to automate; does not depend on the capabilities of social networks
— : man-hours for the initial implementation; the content of such a gate.
If managers are given instructions for using vnc in pictures, I don’t think they can handle it. Therefore, I do not consider it a minus.
IMHO, implementing 2 is much easier than writing browser plugins.

Answer 2

Alternatively, you can find a password manager (like Lastpass), save passwords for accounts in it, and give managers credentials for the password service. Just need to find one where you can share the rights.
But in such a scheme, I still see no obstacles to manually changing the password to the account. :(

Answer 3

If you are considering the option with a gate site, then, apparently, you are not planning hyper-flexibility and versatility, but are ready to sharpen the solution for certain forums and social networks. networks, if I understand correctly.
Maybe write a client program containing a browser and able to limit the list of visited links, for example, prohibiting password changes?
At startup, it would contact your server for a pack of passwords for the N manager.