Manage roles and client workspaces

Explain ownership, account roles, permissions, account switching, client accounts, white-label controls and report sharing.

Owners, team admins and agencies

Feature availability

Product, package, provider and deployment boundaries for this page.

Available from
Current documentation
Deployment modes
cloud

Before you start

Account membership decides who can see projects, billing, reports, agency controls and client workspaces. Use this page before inviting people, changing roles, switching accounts or creating agency client workspaces. Owner, admin and viewer roles are scoped to the selected account. Agency client workspaces add another boundary so one client's projects, branding and shared reports do not mix with another client's workspace.

Confirm account access

Follow the path `Accounts → Account detail → Team roles → Agency client workspace`.

  1. Open /accounts. Result: the Accounts page shows each account card with account type, current user role, billing email, project counts and links to Open, Projects and Billing.
  2. Open the account that owns the project, billing state or report you need to manage. Result: the account detail page shows the current user role badge and account-level Projects, Team roles, Team invitations and notification sections.
  3. Compare the visible role with the task you need to perform. Result: owners keep billing and final ownership control, admins can operate most account workflows, and viewers should stay in read-only review paths.
  4. Use Team roles to change a member role only when the new role matches their work. Result: access changes stay scoped to the selected account instead of every customer or client workspace.
  5. For agency work, open /agency and confirm the client workspace before creating projects or sharing reports. Result: client projects, white-label settings and report sharing stay separated from the agency account.
  6. If the needed account or client workspace is not visible, use Switch between accounts or Manage client accounts before changing roles. Result: role changes happen in the correct workspace.

Route work to the right workspace

Use account roles for team access inside one customer account. Use agency client workspaces when an agency manages separate client projects, branding, shared reports and plan allowance. Do not share owner credentials or move project work into a personal account to bypass a role boundary.

Continue to the next account task

To add a person to the selected account, continue to [Invite team members](/docs/accounts/invite-team-members). To change which account is active before working, continue to [Switch between accounts](/docs/accounts/switch-accounts). For agency client setup, continue to [Manage client accounts](/docs/accounts/manage-client-accounts).

Availability boundaries

Some agency controls depend on plan state, client assignment and white-label eligibility.

  • Owner required means the current user cannot change billing ownership or final account control.
  • Admin required means the current user can view the account but cannot invite users, change roles or manage client workspace settings.
  • Viewer role means the account is visible for review only; use report, scan and project links without changing delivery state.
  • Client workspace missing means agency work must be assigned to a client account before client branding or report sharing can stay separated.
  • Plan-gated behavior means white-label controls, agency allowances or sharing actions need the matching plan state before they appear.

Related documentation

Was this page helpful?

Feedback goes into the product documentation review queue.