Workspace Sharing with Role-Based Access Control (RBAC)
Invite your team into one workspace and give each person exactly the access their role needs - enforced server-side, not just hidden in the UI.
Marketing is a team sport: an owner sets strategy, a manager runs campaigns, a designer produces creative, an accountant checks invoices. When software only supports one login, teams end up sharing passwords - which destroys accountability and security at the same time. BScale AI's workspace sharing solves this properly with role-based access control (RBAC).
From Settings, you invite team members to your workspace and assign each one a role: owner, manager, member or viewer. Each role maps to a clear set of permissions, and those permissions are enforced on the server for every request - not merely hidden in the interface. Because BScale AI has no seat licenses, inviting your whole team costs nothing extra.
Four roles that map to how teams actually work
Owners control the workspace itself: billing, integrations, team membership and everything below. Managers run the marketing operation - campaigns, creative, automations - without holding the keys to workspace administration. Members do the day-to-day work within the areas open to them. Viewers see data and reports without being able to change anything.
This separation means you can bring in exactly the people the work needs. An external consultant can be a viewer during an audit. A freelance designer can be a member working in Creative Lab. Your operations lead can be a manager. Nobody gets more power than their job requires, and nobody has to share a password.
Server-side enforcement, not UI hiding
Many tools implement roles by hiding buttons: the API behind the interface still accepts any request from any logged-in user. BScale AI enforces permissions on the server for every single request. A viewer's session physically cannot modify a campaign, no matter what request is crafted, because the check happens where it cannot be bypassed.
This matters most for the sensitive actions a marketing platform performs: publishing paid campaigns, spending wallet balance, changing integrations. Role checks at the server boundary mean that granting someone access to see your data never accidentally grants them the power to act on it.
Collaboration across campaigns, creative and operations
A shared workspace means shared context. Everyone works against the same connected ad accounts, the same product catalog synced from WooCommerce, the same Creative Library of generated assets and the same Operations Center of leads and orders. There is no exporting and re-importing between personal accounts, and no version confusion about which campaign draft is current.
The shared prepaid wallet completes the picture: the team spends from one balance with one itemized ledger, so the owner always sees exactly what was run and what it cost, regardless of who ran it.
Getting started with workspace sharing
Workspace sharing lives in Settings. Enter a teammate's email, choose their role, and they get access to your workspace with exactly the permissions that role defines. Changing a role or removing a member takes effect immediately, because permissions are evaluated on the server on every request.
Combined with BScale AI's security foundation - encrypted credentials, CSRF protection, rate limiting and an append-only audit log - workspace sharing gives growing teams enterprise-style access control without enterprise-style pricing or complexity.
Frequently asked questions
- What roles are available in a BScale AI workspace?
- Four roles: owner, manager, member and viewer. Owners control the workspace including billing and team membership, managers run marketing activity, members do day-to-day work in their areas, and viewers have read-only access to data and reports. Roles are assigned from Settings.
- Can a viewer change my campaigns or spend budget?
- No. Viewer is a read-only role, and permissions are enforced on the server for every request, not just hidden in the interface. A viewer's session cannot modify campaigns, spend wallet balance or change integrations regardless of how a request is made.
- Does adding team members cost extra?
- No. BScale AI has no seat licenses. You can invite your whole team - owners, managers, members and viewers - without any per-user fee. Costs come only from the premium AI actions your workspace actually runs, paid from the shared prepaid wallet.
- How do I invite someone to my workspace?
- Open Settings, go to workspace sharing, enter the person's email and choose a role: owner, manager, member or viewer. They receive access with exactly the permissions that role defines, and you can change or revoke their role at any time with immediate effect.
- Is role-based access actually secure, or just cosmetic?
- It is enforced server-side: every request is checked against the user's role before anything happens, so restrictions cannot be bypassed by crafting requests directly. This sits on top of BScale AI's broader security model, including encrypted tokens, CSRF protection and an append-only audit log.