Restricting brand access for team members and clients
Last updated: October 13, 2026
Control which brands each workspace member can see and edit, so clients only access the projects intended for them.
By default, everyone you invite has write access to every brand. To limit someone to specific brands, you can set their access when you invite them or change it anytime afterward. Brands a user has no access to won't appear in their sidebar at all.
Note: If the person uses a different email domain than yours, contact Rankscale support to whitelist it first.
Step 1: Open Workspace settings
Open Settings (bottom-left), then click Workspace at the top of the page.
Step 2: Enable per-brand permissions
In the Access Control section, enable "Manage workspace write permissions." This unlocks per-brand overrides and reveals the access dropdown on the invite field used in the next step.
Step 3: Invite the member
In Invite New Member, enter their email and pick an access level from the dropdown:
Workspace: write (default): full access to all brands.
Workspace: read: view-only on all brands.
No access (grant per brand later): no access until you grant specific brands.
For a client who should see only certain brands, choose "No access," then click Send Invitation.
Step 4: Manage per-brand access
Back in Access Control, set each brand to Write, Read, or No access for a member, then click Save. Brands set to No access stay hidden from their sidebar.
Result
The member only sees and interacts with the brands you've granted. Everything else stays hidden.
API Keys Follow the Same Access
An API key created by a member has that member's access to each brand:
Write: the key can read the brand's data and make changes to it.
Read: the key can read the brand's data, but not change it.
No access: the key cannot reach the brand.
Tip: To give a client API access to their brand only, invite them as a member with access to that brand, and let them create their own key. A key you create yourself has your access, not theirs.