Who can view, request, approve or pay?
Client access combines explicit grants. Viewer, requester, commercial approver, delivery approver, payer and message participant are independent.
Watch the walkthrough
Who acts: Workspace Owner or Admin → intended verified client
Go straight to the steps
Playback and accessibility
Use Play or Pause, move back or forward 10 seconds, or restart from the title screen. Tab to a button, then press Enter or Space. Action captions are included in the video, and the complete written steps follow below.
Download the action captionsGo straight to the written stepsFollow the steps.
Choose the intended client and project scope
Open Team and client access, then Invite a person. Enter the Intended verified email, choose client Access type, select Client organization and narrow Project scope. Organization-wide access is broader than one project.
Open team and client accessSelect independent client grants
Under Explicit client grants, select only the required viewer, requester, commercial approver, delivery approver, payer or message participant permissions. Payment authority does not imply approval authority. Private mailbox access is never included.
Prepare the invitation without queuing email
The recording enters a viewing recipient and narrow client/project scope, without creating an invitation. In production, review grants before Create and queue invitation. Only the intended verified email can accept once before the seven-day expiry. Queued is not delivered, and clients see only published permitted records.
Open the client portalReview exact-grant revocation and cancel
The recording opens Revoke grant for one explicit permission, then cancels without changing access. A real confirmed revocation removes only that grant and scope. Other grants remain independent. For one invoice, prefer a revocable document link; it cannot open project chat or grant commercial consent.
What changes when you finish
The right person can view, request, decide or pay within their explicit scope. Neither an internal role nor a guest invoice link can impersonate client consent.
Match authority to the person
Invite a contact to the required organization and project scope. Grant viewing for published records, requesting for outcome requests, and the relevant approval grant for the person who may decide. A payer need not be the person who signs the agreement or approves delivery.
A grant is not a decision
The current published scope proposal names its designated commercial approver. Only that person with the required current grant sees the permitted Accept scope and price or Reject proposal controls in the portal. Each action requires its own confirmation checkbox and an explicit submission. Merely viewing a proposal, checking a box, preparing it internally or paying an invoice does not accept it. Delivery approval remains a different grant and an exact-version decision.
Keep internal work private
The portal contains an allowlisted client projection rather than a hidden-column copy of the workspace. Clients cannot browse private tasks, cost rates, internal notes or staff mailboxes. Project chat requires participant access and does not follow from an invoice payment link.
Treat a guest link as a narrow capability
A document link defaults to seven days and can be revoked. It carries only its specified invoice actions and grants no account session. Ask the provider for a fresh link if it expires; do not forward it to someone who should not have document access.