Consultant Access & Process Assignment
How the consultant role works: cross-account access, process assignment, and visibility rules
The Consultant role is designed for team members who need to monitor automation across multiple client accounts without having full administrative access. Consultants see only the processes explicitly assigned to them.
How the Consultant Role Works
Unlike account-level roles (Account Admin, Account User), the Consultant role operates at the tenant level:
- Consultants are not tied to a specific account
- They can access processes in any account within the tenant
- They only see processes that have been explicitly assigned to them
- They cannot create, modify, or delete any data
Consultant vs. Tenant Admin
| Capability | Tenant Admin | Consultant |
|---|---|---|
| See all processes in all accounts | Yes | No (assigned only) |
| Manage members | Yes | No |
| Change settings | Yes | No |
| Create accounts | Yes | No |
| View assigned processes cross-account | Yes | Yes |
| View jobs for assigned processes | Yes | Yes |
Inviting a Consultant
1. Go to Tenant Members in the sidebar (requires Tenant Admin role)
2. Click Invite Member
3. Enter the team member's email
4. Select the Consultant role
5. Send the invitation
After acceptance, the consultant can sign in but won't see any processes until you assign them.
Assigning Processes to a Consultant
Once a consultant has joined, assign them to specific processes:
1. Go to Tenant Members → find the consultant
2. Click Manage Assignments (or go to the process assignments section)
3. Select processes from any account that the consultant should monitor
4. Save the assignments
Assignment Examples
```
Consultant: Alice ([email protected])
├── Acme Corp account
│ ├── Invoice Processing ✓
│ └── Order Sync ✓
└── Beta Inc account
└── Payroll ✓
```
Alice can now see these 3 processes and all their jobs — but nothing else in either account.
What Consultants Can See
Once assigned to processes, consultants can:
- View assigned processes — name, status, last job, criticality
- View jobs for assigned processes — status, duration, timestamps, error messages
- View job details — per-record results (if submitted via API)
- View the dashboard — filtered to their assigned processes
- View robots — related to their assigned processes
- Download file attachments — from jobs of their assigned processes
What Consultants Cannot Do
- View processes they haven't been assigned to
- View other accounts' data beyond their assignments
- Create, update, or delete processes, jobs, or settings
- Manage members or invitations
- Create or manage API keys
- Trigger syncs or run processes
Removing Assignments
To remove a consultant's access to a process:
1. Go to Tenant Members → find the consultant
2. Click Manage Assignments
3. Uncheck the process
4. Save
The consultant immediately loses access to that process and its jobs.
Removing a Consultant
To fully remove a consultant from your tenant:
1. Go to Tenant Members
2. Find the consultant
3. Click Remove
This removes their membership and all process assignments. They can no longer access any data in your tenant.
Best Practices
- Assign only necessary processes — Follow the principle of least privilege
- Review assignments regularly — Remove access when projects end
- Use descriptive process names — Helps consultants quickly identify what they're monitoring
- Combine with Account Users — For clients who need direct access, use Account User for them and Consultant for your team