Agency Manager — Team Members and RBAC
Invite team members to work on clients and control what they can do — Owner, Editor, or Viewer roles.
What is it?
The Team tab in the Edit Client modal. You can invite Google-authenticated users to work on the client, assign a role, and revoke access. Three roles:
- Owner — full control (you, the agency admin). There's only one owner per client.
- Editor — can generate, edit, approve, and publish content. Can't manage team or delete clients.
- Viewer — read-only. Can browse but can't click write actions.
When should I use it?
- You're adding a writer, strategist, or client collaborator to a specific client.
- A client's in-house team wants read-only access to track content progress.
- A team member leaves — revoke their access immediately.
How to use it
- Open Edit Client modal. Switch to the Team tab.
- Click + Invite Team Member.
- Enter the team member's Google email address. They must have a Google account.
- Pick a role — Editor or Viewer.
- Send the invite. They'll see the client in their sidebar next time they log into NexusSEO.
- To change a role or revoke, click the member's row and use Change Role or Remove.
Tips and best practices
- Grant Viewer by default for clients who want visibility without edit rights. Most client stakeholders fit here.
- Editor is for in-house team — writers, strategists. Be deliberate about who gets it.
- Review team membership quarterly. Remove inactive members to reduce attack surface.
- When a member's role changes, the app revokes their active session within a few seconds via a real-time listener.
Gotchas and limits
- Team members must sign in with the exact Google email you invited. Aliased addresses don't match.
- Role changes take effect immediately — the member may see a permissions error mid-action if they're working when demoted.
- Viewers see the Help Center but not the Data Sources tab (that's owner/editor territory). They have My Settings for personal Drive.
- Only the Owner can manage the Team tab.