Give each client its own workspace with its own connected accounts and its own data, then grant staff access per workspace rather than globally. Running several clients through one shared account makes a permissions mistake into a confidentiality incident, and makes it impossible to hand a client their own data cleanly.
Why not run everything in one account?
Because separation that exists only as a filter is not separation. If every client's data sits in one space and the boundary is a dropdown, one mis-set filter puts one client's figures in another client's report.
It also makes offboarding painful. A client leaving should be able to take or delete their data, and that is only simple when their data was never mixed with anyone else's.
What should a workspace actually contain?
Everything scoped to one client, so the boundary is real rather than cosmetic.
In NexPulse a workspace holds exactly this, with owner, manager and analyst roles, and a plan sets how many workspaces you can own.
- The connected advertising and analytics accounts for that client.
- The data synced from them.
- The team members who work on that client.
- The credits or usage consumed on their behalf.
What roles does an agency actually need?
Fewer than most tools offer. Three is usually enough: someone who administers the account, someone who runs the work, and someone who reads.
The distinction that matters is between changing connections and reading reports. Most people on a client only need the second, and giving them the first is how an integration gets disconnected the day before a report is due.
What about the client's own access?
Give it to them, read-only, in their own workspace. A client who can open the numbers themselves asks better questions and disputes fewer figures.
The objection is usually that they will misread something. That is an argument for annotating the report, not for withholding the data — and a client who suspects data is being withheld is a harder problem than one who misreads a chart.
Frequently asked questions
- Does each workspace need its own connections?
- Yes. Connections are authorised per account, and sharing one across clients is what makes separation cosmetic. It also means revoking one client's access does not affect another's.
- How many workspaces does an agency need?
- One per client, plus one for the agency's own marketing. Agencies routinely forget the last one and end up with no reporting on themselves.
- How many workspaces does NexPulse include?
- Starter includes one, Growth three, and Pro unlimited. Each includes one seat, with extra seats priced per plan.