Manage team roles and client permissions

Agency team roles and client portal memberships are separate. Grant the smallest access needed for the person's work, and verify it in the intended workspace.

Agency team

Open the team settings available to the workspace owner or authorized administrator. Review the role description before inviting someone. Confirm the email, workspace and pending invitation state. If settings are missing, check the current role rather than creating another owner account.

Client membership

Add a person to the correct portal account and review what that member may see or do. Use separate identities for separate people. Check the primary contact and task assignees when a client's team changes.

Files and internal work

File and folder access can be shared, team-only or limited to selected accounts/people. Internal account notes remain agency-only. Client-visible messages and general comments require their own visibility check. Do not use hidden navigation as a substitute for access rules.

Verify changes

Read back the membership and role after any authorized change, then check the actual allowed view. Removal, password changes and broad access expansion deserve deliberate review. Do not disclose another client's records while investigating a permission issue.