Running many client workspaces from one master account
Updated 2026-08-01 · 5 min read
A firm serving eighty clients does not want eighty logins. It wants one console, hard isolation between clients, and the ability to hand a client limited access to their own workspace.
Isolation is a database property
Client separation must be enforced at the data layer with row-level security keyed to workspace membership, not by filtering in application code. Application filters fail open the first time someone writes a new query.
Roles that match how firms work
Three roles cover almost every real firm structure.
- Owner: workspace settings, members, billing profile
- Finance: invoices, credit notes, payments, approvals, exports
- Sales: drafting and customer records, no release rights
One console, many books
The partner console should show every client workspace, its invoice volume, its export activity and its share of the current billing period. That single view is what turns a compliance tool into infrastructure a firm can actually run a practice on.