Client access is a switch, not an assumption. Plenty of agencies run every account themselves and send a report each month; plenty of others hand the reviews feed to the client's own team. Both are normal, and you can move between them without touching anything else.
What you need: an email address on the client's side. Until somebody there has a login, there is nobody for access to let in, so the invite comes first.
Inviting the client
Open the client's row on Clients for the manage drawer, above the access switch. Enter the email of the person who should sign in, choose What they pay (keep their current plan, send them on the house, or start them on one of your retail plans), and press Invite client.
The invite section of the manage drawer with the client email field.
They get a link to sign in under your branding. Nothing changes for them until they accept, and you can switch their access off again at any time. A send can also come back held rather than sent, most often because your domain has not verified yet, with a fix and a Resend right there in the zone. See Invite a client to their account for the plan choice and every held state in full. You can also add the email while creating the client, which sends the same invite.
What the client gets
Their own location and nothing else: the reviews feed, their reports and their billing. No switcher listing other clients, no link up to this panel, no aggregate numbers, and no sign that anything exists above their account.
Which screens they see is the feature mix on their plan, and the per-client exceptions you set in the same drawer.
The 5 billing permissions
Under What they can do about billing are 5 switches. The first gates the other 4, because there is nothing to switch a plan on or buy a top-up from once the billing section is hidden.
- See their billing. Their plan, what is left of their credits, and the invoices you raised. Off hides the whole section and leaves a card pointing at you.
- Update the payment method. Opens your Stripe customer portal so they can fix a dead card without emailing you.
- Switch plans. Move themselves between your plans. The price and the features change together.
- Buy credit packs. Buy the packs you priced, charged on your Stripe.
- Cancel on their own. Ends at the period end and tells you it happened. Off means they have to ask you first.
The five billing permission switches in the manage drawer.
The recommended set is everything except canceling, and that is what new clients start with. Change it under Client defaults in the sidebar, and bend it per client in the drawer.
The billing permissions on the New client defaults card, which every new client starts with.
All of it runs on your Stripe under your branding, so a client who switches plan or buys a top-up is charged by you and sees your name on the receipt.
Switching access off
Use the Client access switch. It asks first, because the client finds out by being locked out.
Automation, replies and billing carry on exactly as they are: switching access off only decides who may sign in, not whether the location runs. Every session the person and anyone else on their side is holding ends in the same action, so nobody signs back in on an open tab. From that point, a fresh sign-in attempt is refused with one sentence that names nobody on your team: "Your sign-in has been switched off. Contact whoever manages your account." Turning access back on is 1 click, takes effect immediately, and does not sign anyone in for them.
One thing to watch: a client who cannot sign in cannot fix their own card. If their subscription goes past due, chasing them is on you, and the Client subscriptions table flags exactly that combination.
Access and pause are different
Access off means they cannot sign in while everything keeps running and billing. It is a lock on the door, nothing else. Pausing a client is the other switch in the same drawer: it stops ingestion and automation on every location they hold and blocks their sign-in too, but it never touches a subscription on its own. Reach for access off when you are running the account for them day to day; reach for pause when the relationship itself has stopped. See Pause a client for what it does and how to undo it.