All topics

Team, departments & access

Invite members, set up departments, and grant access along any of four paths.

Invite + manage members

From /[workspace]/team, click Invite member. The invitee gets a magic link valid for 7 days. Each member row has a dropdown for owner/admin: change role, manage client access, manage departments, send the daily digest now, remove from workspace.

Departments

Group your team by discipline ("PPC", "SEO", "Social", "Account Management"). A member can sit in multiple departments — supervisors and generalists naturally span disciplines. Manage at /[workspace]/team/departments (owner + admin only).

The team list page shows each member's departments inline as colour chips. Members in 2+ departments get a small ★ Lead badge — supervisor pattern.

Each department also has its own detail page at /team/departments/[id] with bulk Add members, inline remove, and a read-only summary of which clients + groups it has access to.

The four access paths

When the workspace policy is "Restricted by assignment", members + viewers see a client only if at least one of these four direct grants exists:

  1. Member → Client— direct, per-pair. Manage from the client's Access tab toggles or the team-row "Manage client access" dialog.
  2. Department → Client— every member of the department gains access. Manage from the client's Access tab, "Department access" section.
  3. Department → Client group— every member of the department gains access to every client in the group, including future clients added to the group. Manage from the group's "Manage access" dialog.
  4. Member → Client group— direct individual grant to a whole portfolio. Useful for freelancers or execs. Same dialog, "Direct members" section.

Owners + admins always see every client regardless. The client's Access tab shows an "Effective access" list that explains which paths grant access for each member — answering "who can actually see this client?" in one read.

Switching the workspace policy

Settings → Workspace → Client access. Default: everyone sees everything(assignment grants exist but don't restrict). Switching to Restricted by assignment turns the four paths on — members + viewers immediately see only clients with at least one matching grant.

Switch when your team grows past the "everyone knows every client" threshold (usually around 8–10 members, or when you sign your first NDA-bound client).