Inviting Your Team and Assigning Roles in Blueprint

Understanding Blueprint's Role Hierarchy

Blueprint uses a four-tier role-based access control (RBAC) system: Owner, Manager, Analyst, and Viewer. The hierarchy is strictly additive -- each role inherits all permissions from the roles below it and adds new capabilities on top. This means a Manager can do everything an Analyst can, plus manage team members, and an Owner can do everything a Manager can, plus control billing and workspace settings.

The Owner is the workspace creator. There is exactly one Owner per workspace, and ownership cannot be transferred through the UI. The Owner has full control: managing billing, changing plan tiers, inviting and removing team members, changing roles, connecting and disconnecting ad platforms, setting budget targets, applying budgets, and viewing all data. If you are the person who created the workspace, you are the Owner.

A Manager has nearly the same access as the Owner, minus billing and workspace deletion. Managers can invite team members, assign roles (up to Manager level), connect ad accounts, set budget targets, apply budgets, and access all reporting features. This role is designed for senior team leads or account directors who need operational control without financial responsibility.

An Analyst is the day-to-day operator role. Analysts can view all campaign data, keyword metrics, quality scores, and search terms. They can set budget targets and apply suggested budgets to campaigns. However, they cannot invite or manage team members, and they cannot connect or disconnect ad platform accounts. This role works well for PPC specialists who need to work with the data but should not be managing workspace access.

A Viewer gets read-only access to dashboards and reports. Viewers cannot modify anything -- no budget targets, no budget applications, no keyword management, no team invitations. This role exists specifically for client access: give your clients a login so they can see their campaign performance without risk of accidental changes.

The Permissions Matrix

The following matrix shows exactly which permissions each role has. When evaluating whether a team member needs a specific role, use this table to find the lowest role that covers their requirements. Assigning the minimum necessary role is a security best practice that reduces the risk of accidental changes.

Notice that the key difference between Analyst and Viewer is write access. Viewers can see everything an Analyst can see, but they cannot change anything. The key difference between Manager and Analyst is team management: Managers can invite new members, while Analysts cannot. And the Owner exclusively controls role changes, member removal, and billing.

Inviting a Team Member

To invite someone to your workspace, navigate to Settings → Team and click Invite Member. Enter the person's email address in the invitation form. Blueprint performs a debounced lookup (with a 500ms delay to avoid excessive API calls as you type) to check whether the email belongs to an existing Blueprint user. If it does, the invitation flow is streamlined -- the person simply accepts the invitation and is added to your workspace. If the email is not associated with an existing account, Blueprint sends an invitation email that includes a signup link.

After entering the email, select the role you want to assign. Owners and Managers can invite members at any role level up to Manager. You cannot invite someone as an Owner -- there is only one Owner per workspace, and that is the person who created it. Choose the role carefully, because only the Owner can change roles after the fact.

When you send the invitation, Blueprint generates a unique invite link and presents it in a confirmation modal. The link is copyable, so you can share it directly via Slack, email, or any other channel if the automated email does not reach the recipient. Invitations expire after 24 hours for security reasons. If the recipient does not accept within that window, you will need to send a new invitation. Pending invitations are visible in the Team settings panel and count toward your workspace member limit.

Blueprint prevents duplicate invitations to the same email address. If you try to invite someone who already has a pending invitation, Blueprint will surface the existing invitation and let you resend or cancel it rather than creating a duplicate. This prevents confusion when multiple team members are managing invitations.

Giving Clients Viewer Access

One of Blueprint's most valuable features for agencies is free Viewer seats. Unlike most PPC management tools that charge per user regardless of access level, Blueprint's Viewer role is completely free. You can invite as many clients as you need without affecting your subscription cost. Viewer seats do not count toward your workspace's paid member limit.

Viewers get access to the same dashboards and reports that your team sees, but in a strictly read-only mode. They can view budget pacing charts, campaign performance metrics, quality score trends, and AI-generated insights. All action buttons -- like Apply Budgets, Set Target, or Invite Member -- are hidden from the Viewer's interface entirely, not just disabled. This means there is zero risk of a client accidentally modifying campaign data or workspace settings.

The typical agency workflow is straightforward: connect your client's ad accounts to your workspace, set up budget targets and let Blueprint sync the data, then invite the client as a Viewer. They get a clean, professional dashboard showing their campaign performance without seeing any of the internal team management, budget application history, or workspace configuration. It is essentially a white-label-style client portal built into Blueprint's core product.

Viewers can log in at any time and see the most recent data without your team needing to generate or export reports manually. This self-service access model reduces the back-and-forth communication overhead that plagues many agency-client relationships. When a client has a question about their spend this month, they can check the Budget Pacing dashboard themselves instead of emailing your team for a status update.

Managing Your Team

The Team settings panel shows all active members and pending invitations for your workspace. Each entry displays the member's name, email, role, and join date (or invitation status for pending members). The workspace supports up to 5 active members on paid roles (Owner, Manager, Analyst), plus unlimited free Viewers. Pending invitations count toward the 5-member limit, so keep that in mind when inviting multiple people at once.

Only the Owner can change a member's role after they have joined the workspace. To change a role, click the member's entry in the Team panel and select the new role from the dropdown. Role changes take effect immediately -- the member's permissions update on their next page load without requiring them to log out and back in. Downgrading a member (e.g., from Manager to Analyst) removes their ability to perform higher-level actions immediately, but does not undo any actions they have already taken.

Removing a member is also restricted to the Owner. When you remove a member, they lose access to the workspace immediately. Any budget targets they created or budget applications they made remain intact -- Blueprint tracks these by user for audit purposes, but the data does not disappear when the user is removed. If you need to remove and re-invite someone (for example, to change their email address), the removal is instant, but the new invitation still follows the standard 24-hour expiry flow.

If your team outgrows the 5-member limit, you have two options: upgrade to a higher plan tier that supports more members, or audit your current roster and convert less active members to Viewer roles (which are free and unlimited). In practice, most small agencies find that 1 Owner, 1-2 Managers, and 1-2 Analysts covers their operational needs, with Viewer seats handling all client access.