Why shared logins fail at scale
When three people share one WordPress admin, nobody knows who changed the homepage hero, who disabled the contact form plugin, or who reset the password without updating the vault. Shared credentials also make offboarding messy — ex-contractors may still have access months later.
Per-site roles fix accountability. Each person gets the minimum access required for their job, scoped to the client website they are working on — not your entire portfolio.
Four roles that map to real agency work
Owner
Typically the agency lead or account holder. Owners manage billing, domains, plan limits, and who else can access the site. They approve go-live and structural changes.
Manager
Project managers and senior producers. Managers coordinate content, assign editors, review drafts, and manage settings that affect launch quality — without needing billing access.
Editor
Content specialists and junior team members. Editors update pages, services, blog posts, and media within guardrails. They should not accidentally change DNS or delete navigation.
Viewer
Clients who need visibility without edit rights — or stakeholders reviewing copy before publish. Viewers reduce “can you send me a preview link?” threads.
Permission mistakes to avoid
- Promoting everyone to admin because it is faster than configuring roles
- Leaving contractors on owner after a project ends
- Mixing client and agency identities on the same personal email without audit trails
- Granting DNS access to content editors who only need page updates
Client handoff without chaos
The best handoffs happen in stages. During build, your team holds manager and editor access. Before launch, the client receives viewer access to approve copy. After launch, promote the client contact to editor on their site only — while your agency retains manager oversight for support retainers.
Debugsy scopes roles per website so a client editor on Site A never sees Site B in their workspace.
Document your defaults
Write a one-page internal policy: which role new hires receive, how long contractors keep access, and who approves owner transfers. Technology enforces boundaries; process makes them stick.