Client workspaces
Manage onboarding and consent-based support access.
Simulation only: active clients have separate browser-local bidding records. This does not provision infrastructure or authenticate users. Tenant owner mode represents the owner of the selected client.
Create client workspace
Select client
Permission boundaries
| Role | Allowed | Not granted |
|---|---|---|
| Platform onboarding | Create workspace metadata, configure onboarding, activate/suspend | Client job contents, financial records, signing, self-approved support access |
| Platform support | Client service status, request access; approved configuration diagnostics for one hour | Proposals, accounting, tenant changes or granting itself access |
| Tenant owner | Accept onboarding; approve, deny or revoke support access for own tenant | Other client workspaces; platform operations |
| Tenant Administrator | Technical configuration and user administration within assigned authority | Automatic finance, commercial approval or platform access |
| Proposal / Project Manager | Existing author / assigned reviewer workflows | Platform operations; finance without separate finance grant |
| Finance operator | Authorized tenant invoices, receipts, bills and reports | Other tenants or implicit proposal sign-off authority |