Agency Roles & Invitations
Distinguish ordinary management from owner-only powers.
Content and code last checked 2026-10-06 by ConsentEase product documentation. This is a review of the written content and code, not a test on a live third-party platform.
Confirm your accepted role
Check membership and invitation status in the agency area. A role label in a pending invitation does not grant accepted membership.
Ordinary management
Agency owners and accepted admins can use ordinary management of authorised client websites, including banner management. Do not assume every member or external email address can do the same.
Sensitive operations
Creation, ownership-level and sensitive/destructive powers remain owner-only where the product enforces them. Client visibility does not authorise changing billing, transferring ownership or deleting data.
Invitations and removal
Use the supported invitation/acceptance flow and verify the resulting access. Review current members regularly. Removing access does not erase documents already downloaded or independently shared with providers.
API keys
Keys inherit their issuing account's access and scopes, not unrestricted agency powers. Restrict them to the smallest required scope and revoke unused keys. Do not send an owner's full-power key to a client as a shortcut.