The client portal is a separate, secure area where your clients sign in to see their tickets and projects — without any access to your internal organization. You control who gets in, contact by contact, right from the contact record. (The portal itself requires the Client Portal module to be enabled; this page covers the staff side of managing access.)
Granting access#
On the contact's edit page, the Client Portal card shows the person's status — Not Enabled, Invited or Active — and the controls for letting them in:
- Under Portal-enabled companies, switch on at least one of the contact's companies. The portal only shows portal-enabled companies, and until one is on the card says "Enable at least one company first."
- Under Capabilities, tick what the person may do. The groups are Tickets, Projects, Prepaid hours (only while Agreements is on), Reports and Scope. Reports lets the person see the status reports and health reviews you publish to their company; it's off until you tick it.
- Under Board allowlist and Project allowlist, tick the boards and projects they can see. With none ticked they get no ticket access, or no project access.
- Choose Enable & send invite. AspirePro emails the contact an invitation to set a password and sign in to the portal. Their status shows Invited until they do, then Active.
What clients can see#
Portal users see a deliberately narrow slice of the organization — their tickets (and can open new ones and reply) and their projects (a simplified project view with tasks, checklists, comments, attachments, and links). With Prepaid hours ticked, they also see hours used and left on their company's prepaid blocks — hours only, never prices or rates. With Reports ticked, they see the reports you publish to them, exactly as sent. They never see internal-only details like time entries, audit logs, assignees, or other clients' data. Exactly which capabilities are available is governed by the portal's default-deny permission model, configured by an administrator.
Company-level opt-in#
Access is governed at the company level too. The Portal-enabled companies switches on the card turn portal access on or off for a whole client company at once; the per-contact capabilities and allowlists then fine-tune it for each person.
Managing and revoking access#
Once someone is invited, the card offers:
- Save access — saves changes to capabilities and allowlists.
- Resend invite — while the contact is still Invited, sends the invitation again.
- Send password reset — once they are Active, emails a link to choose a new password for a contact who is locked out. Their current password keeps working until they use it.
- Deactivate — cuts off portal sign-in immediately and signs them out, while preserving all the underlying records. Choose Enable & send invite to let them back in.
Portal access is a privilege you grant deliberately. Because it's managed per contact and per company, you always know exactly who on the client side can sign in.
For the client's experience inside the portal, see the Client Portal module documentation.