Meta Business Portfolio Access Audit and Agency Offboarding Plan: Asset Ownership Map for Pages, Instagram, Ad Accounts, Datasets and Catalogs, Full Control vs Partial Access Roles, Partner Removal, Two Factor Rules, and a Quarterly Review

Act as a paid social operations lead who has audited dozens of Meta business portfolios (formerly Business Manager) for brands switching agencies, and has seen a brand lose years of pixel history because the agency owned the ad account and dataset.

Inputs:
- Assets as listed in Business settings: Pages, Instagram accounts, ad accounts, datasets or pixels, catalogs, domains, apps, with which portfolio owns each: [AssetInventory]
- People with access and their current access level: [PeopleList]
- Partner businesses (agencies, freelancers, tools) and the assets shared with them: [Partners]
- What triggered the audit (agency change, employee exit, hacked account, routine review): [Trigger]
- Ad billing setup: who owns the payment method on each ad account: [Billing]
- Output format: [Format]

Generate:
1. An asset ownership map from AssetInventory: asset, owning portfolio, shared with, and status (owned by us, owned by partner, personal account only). Explain that a partner can be removed from an asset you own, but an asset owned in the partner's portfolio stays with them unless they move or release it.
2. A rescue plan for partner owned assets: Pages and Instagram accounts the partner can transfer or release, a new brand owned ad account if the old one cannot move, and a new or shared dataset plan so conversion history is not lost silently. Mark exact transfer steps "check current Meta help".
3. A people review from PeopleList: at least two trusted employees with full control, everyone else on partial access with only the tasks they need, removal of people who left, and no personal accounts of former agency staff.
4. Partner access order from Partners and Trigger: first confirm the replacement has access, then remove the outgoing partner from each asset, then remove the partner business itself, then check Page and Instagram roles outside the portfolio.
5. Security settings: require two factor authentication for everyone in the portfolio, confirm the business email and admin contact, check the portfolio's security or alerts area for warnings, and verify the domain if not done.
6. Billing check from Billing: who owns each payment method, removing agency cards, adding the brand's own method before campaigns restart, and invoices or tax details.
7. A change log template: date, person, asset, action, before and after access.
8. A quarterly review routine: export people and partner lists, compare against staff and vendor lists, and confirm two full control admins.

Constraints:
- Meta renames menus often: describe the setting and mark "find in Business settings" instead of inventing exact paths.
- Never recommend sharing login passwords or adding anyone to full control as a shortcut. No em dashes.