Workspaces and roles
In an agency account each client sits in its own workspace; ad accounts, rules and limits never bleed into each other. What each role opens and what it closes.
While you manage a single brand, account structure looks like a detail. When the second client arrives, the first question becomes: can these two accounts’ data, rules and teams bleed into each other?
The workspace — where isolation ends
In Mentorivo everything belongs to a workspace: connected ad accounts, campaign data, automation rules, creatives, reports and billing. A workspace is not just a folder, it is the boundary of the data — reading one workspace’s data from another is not possible.
For agencies the natural use is one workspace per client. For single-brand teams one workspace is enough; a second only makes sense when there is a separate business or separate billing.
Four roles
A user can belong to several workspaces and hold a different role in each. The roles nest: each one can do everything the one below it can.
- Owner: everything, including billing and decisions about the workspace itself.
- Admin: connecting ad accounts, writing rules, inviting members — everything except billing.
- Member: the daily work. Campaign and creative operations, running rules, approving proposals.
- Viewer: read-only. Sees reports and dashboards, changes nothing.
Invitations and leaving
Members are invited by email and invitations expire. When someone leaves the team their membership is removed, while the record of what they did remains. That record belongs to the workspace, not the person — the answer to “who changed this budget” stays valid after they have gone.
A practical suggestion
Start roles at the narrowest permission. Raising someone’s role the first day they cannot do their job is easy; taking back a permission granted too broadly rarely occurs to anyone. The same logic applies to ad account connections: every account you connect is an account everyone in that workspace can see.