Your team controls client portal access entirely from the staff side — specifically from a contact's record. This is the same access management described under Contacts → Client portal access; here's how it fits the portal.
Company opt-in first#
Before any of a client's contacts can see anything, their company must be portal-enabled — a per-company toggle. This is the master switch for a client organization: turn it on to allow portal access for that company's people, off to shut the whole company out at once. Only portal-enabled companies' data ever appears in the portal.
Granting a contact access#
From a contact at a portal-enabled company, use the portal access card on the contact and click Enable & send invite. When you do, you:
- Choose the capabilities they get (see What clients can see; the list calls tasks "work items") and, for tickets, an allowlist of boards they can reach.
- Tick Prepaid hours if they should see hours used and left on their company's prepaid blocks. It's off for everyone until you tick it, and it appears only when Agreements is switched on.
- Tick Reports if they should see the status reports and health reviews you publish to their company. It's off until you tick it. Without it, publishing a report reaches nobody at that company.
- Send them an invitation to set a password and sign in.
Managing and deactivating#
From the same card you can:
- Change their capabilities or board allowlist as the relationship changes, then click Save access.
- Resend invite if they didn't receive it.
- Send password reset (after they've activated) — they get a link to choose a new password; you never see their password.
- Deactivate portal access, which signs them out and stops them signing in until you enable them again, while preserving all the underlying records.
Managing portal access requires the client-management permission, so only the right staff can extend or change who gets in.
Two levers, two scopes: the company opt-in governs a whole client organization, and per-contact access governs each individual and exactly what they can do. Together they let you open the portal to a client precisely — the right people, the right boards, the right capabilities.