The Author VA Toolkit: Tools, Platforms, and Access Your VA Needs
One of the more underrated aspects of a successful author VA onboarding is the toolkit setup — the process of identifying every tool and platform in your publishing business, deciding what your VA needs access to, and providing that access in a way that's both functional and secure. Authors who do this systematically before their VA starts get much smoother early weeks than those who hand over access reactively, one credential at a time, as tasks demand it.
This article maps the full toolkit landscape for an author VA relationship: what tools fall into each functional category, what access level your VA typically needs in each, and the security practices that protect your accounts while enabling your VA to work effectively. Not every author will use every tool listed here — the right toolkit is the one that matches your actual publishing operation, not a hypothetical ideal one.
Communication Tools
How you and your VA communicate day-to-day shapes the entire texture of the relationship. Email works, but it creates a fragmented inbox and lacks the quick, contextual exchange that an active VA relationship benefits from. A dedicated messaging platform, set up at the start of the relationship, keeps VA communication separate and organized.
Task and Project Management
A task management tool is the operational heart of the VA relationship — the place where work gets assigned, tracked, and completed without relying on memory, email threads, or verbal agreements. The right tool eliminates a significant fraction of management overhead by making the status of every task visible without requiring a check-in conversation.
Social Media and Content Scheduling
If social media management is part of your VA's role, they need access to your scheduling platform with posting rights but typically not admin access to your underlying social accounts. Most scheduling tools support multiple user roles.
Buffer: clean interface, straightforward scheduling across Facebook, Instagram, LinkedIn, and others; the most common choice for simple multi-platform scheduling
Hootsuite: more comprehensive analytics and management tools, better for authors with high social media volume or complex multi-account setups
Later: strongest for Instagram and TikTok, visual grid preview, useful for aesthetic-first content strategies
Metricool: analytics-forward scheduler with strong reporting — useful when your VA is expected to report on social performance, not just schedule content
Give your VA scheduler-level access (can create and post content) rather than admin-level access (can add or remove other users, access billing). The distinction matters both for security and for clear accountability.
Email Marketing Platform
Your email list is your most valuable owned marketing asset, and your VA will need some level of access to manage it — list hygiene, newsletter formatting and scheduling, automation updates, and subscriber management. The access level depends on the VA's specific role.
MailerLite, ConvertKit/Kit, Klaviyo, ActiveCampaign, and Mailchimp all support multiple user roles — in most cases, you want your VA to have 'editor' or 'campaign manager' access rather than full admin access, which would include billing and account deletion permissions
Create a documented process for any action that modifies the list structure (deleting segments, changing automation sequences, updating tags) so your VA checks with you before making structural changes rather than executing them independently
Your VA's access to your email platform is high-trust access — the email list represents years of relationship-building, and mistakes here can damage that relationship. Make sure your VA understands the sensitivity of this asset
Reader Delivery and ARC Management
BookFunnel: used for reader magnet delivery, ARC distribution, and direct sale delivery. Your VA needs author-level access to create and manage download pages, add titles, and monitor downloads. BookFunnel's multi-user support allows this without sharing your primary account credentials.
StoryOrigin: used for ARC management, newsletter swap coordination, and group promo participation. Your VA can manage incoming ARC requests, track review status, and coordinate swap arrangements with appropriate access.
NetGalley: if you use NetGalley for broader ARC distribution, your VA can manage listing creation, ARC copy distribution, and review monitoring under your account.
Design and Visual Assets
Canva: the standard author design tool for social graphics, newsletter headers, cover mockups, promotional materials, and event assets. Set up a Canva Team account (or share your Canva Pro account via the brand kit) so your VA can access your brand colors, fonts, and logo without recreating them. Canva supports team members with editor access.
Adobe Express: Adobe's simplified design tool, similar to Canva and included with some Creative Cloud subscriptions. Less commonly used than Canva but supported by some VAs who have Creative Cloud access.
Your cover designer's Dropbox or Google Drive folder: if your VA is preparing cover briefs or organizing cover files, they may need read access to your design asset storage.
Website and Author Platform
Author website access is one of the higher-trust access grants in the toolkit — with full admin access, a VA could make significant changes to your site's structure and content. Be deliberate about the access level.
WordPress: give your VA 'Editor' role (can create and edit posts and pages, upload media) rather than 'Administrator' (can change themes, install plugins, manage users). For routine content updates and blog posting, Editor is sufficient.
Squarespace: Squarespace's contributor role allows content editing without account access or billing. Appropriate for a VA handling content updates.
Wix: Wix's co-editor role provides similar scoped access for content management.
Give your VA explicit written guidance on the types of changes that require your approval before being made — anything that affects site structure, navigation, or plugin/app installation should go through you.
Retailer and Distribution Platforms
Access to your actual retail accounts (KDP, Kobo Writing Life, Apple Books, Draft2Digital) is sensitive and typically not needed for routine VA tasks. Most of the retailer-related work a VA handles — metadata research, keyword suggestions, category recommendations — can be done without live account access and submitted to you for implementation.
If your VA will be managing metadata changes directly (uploading revised descriptions, adjusting categories, making pricing changes), give them access on a per-session basis with clear SOPs about what they're authorized to change rather than persistent admin credentials. For most author operations, keeping retail account access with the author and having the VA prepare changes for author implementation is the safer and more appropriate model.
⚠ Your KDP account, your PayPal/Stripe accounts, and any accounts connected to financial transactions should have the most restricted access in your toolkit. Your VA almost never needs direct access to these, and the risk of error or unauthorized action is significant. Keep financial account access with yourself.
Analytics and Reporting
ScribeCount is the natural home for your publishing analytics — connecting your retail accounts, aggregating your royalty data, and providing the cross-platform view of your business performance that your VA may need to reference when supporting your marketing decisions. ScribeCount's reporting tools let your VA pull performance data on specific titles, track sales trends around promotional activity, and prepare the analytics summaries that inform your strategy discussions without giving them access to the underlying retail accounts that feed it.
Give your VA read-only access to your ScribeCount dashboard as part of their standard toolkit. The ability to pull real sales data when preparing a launch plan, assessing which backlist titles need attention, or evaluating the return on a recent promotion gives your VA the same information context you have — and produces much more useful support than asking them to work with assumptions about how your business is performing.
Password Management and Security
A password manager is not optional — it's the security infrastructure that makes VA account access both practical and safe. Without one, credential sharing happens through email, text, or chat, which creates an unmanaged trail of sensitive information and makes revoking access difficult if the relationship ends.
1Password for Teams, LastPass, or Bitwarden all support credential sharing without revealing the actual password — you share a vault item, the VA can use it to log in, and you can revoke access by removing them from the shared vault without changing the underlying credentials
When a VA relationship ends, revoke access through the password manager immediately and change any credentials the VA had visibility of in other forms
Audit your VA's access scope annually or when the scope of their role changes significantly — access that was appropriate for one set of tasks may be over-provisioned after the role evolves
Conclusion
A well-configured toolkit is the infrastructure that makes VA delegation actually work at speed. The time you invest in mapping access, setting up shared accounts, and establishing the right tools before your VA starts comes back immediately in a smoother, faster-ramping relationship. The next article covers the SOPs — the Standard Operating Procedures — that capture how these tools get used, and how to build them once in a form that makes your VA's work repeatable, consistent, and less dependent on your direct involvement.
Hello, I'm Randall Wood. When I'm not pounding the keyboard or entertaining my giant dog I like to build tools for my fellow indie authors. In these articles, you'll find lessons learned over sixteen years spent in the indie author world. I share it all here to help you get one step closer to where you want to be.— Randall