Upspring gives you flexible control over who can access each Space and what they can do inside it. To support different workflows—especially for agencies and teams managing multiple brands—we use a two-layer permission model:
Account-level access
Space-level access
This allows you to define a user’s default access across the entire account, while still adjusting permissions for specific Spaces when needed.
Account-Level Access (Admin / Editor / Viewer)
Account-level access defines a user’s default role across all Spaces.
Admin – Full control across the account, including billing, settings, user management, and all Spaces.
Editor – Can edit content, analyze creatives, and collaborate across Spaces, but does not have access to account-wide settings like billing.
Viewer – Read-only access. Can browse creatives, reports, and insights but cannot make changes.
A user’s account-level role automatically applies to every Space unless you override it with a Space-level permission.
If a user has access only to specific Spaces, they will only see those Spaces in the UI—nothing else will be visible.
Space-Level Access
Space-level permissions let you fine-tune access for each Space individually.
You can assign a role that is equal to or higher than the user’s account-level role.
For example:
A user with account-level Editor access can be promoted to Admin in a specific Space if needed.
They will remain Editor in all other Spaces.
Space-level access cannot downgrade below account-level access—meaning you cannot give an "Admin" user viewer access in a specific Space.
How Permission Overrides Work
Upspring always applies the highest available permission between account-level and space-level access.
Examples
✦ Example 1
Account-level: Editor
Space-level (Space A): Admin
Result: User is Admin in Space A and Editor in all other Spaces.
✦ Example 2
Account-level: Viewer
Space-level (Space B): Editor
Result: User is Editor only in Space B and Viewer everywhere else they can access.
✦ Example 3
Account-level: Admin
Space-level attempts: Viewer
Result: User remains Admin. Higher permission always wins.
What Users See in the Workspace
Users only see Spaces they have access to.
Their visible controls and actions inside each Space automatically adjust based on their effective role (the highest role assigned between account and space).
This ensures a clean, secure experience—especially when collaborating with external partners, agencies, or freelancers.
Summary
Upspring’s access model is built to support both simplicity and control:
Account-level access sets the default role.
Space-level access lets you elevate permissions per Space when needed.
Highest permission always applies.
Users only see the Spaces they’re granted access to.
If you need help assigning roles or designing the best access structure for your team, feel free to reach out!