Create and maintain the owning account
Open Business → Customers. Creating or changing a customer requires clients.manage; viewing requires clients.view. Complete the real contact and billing profile before generating invoices or registrar purchases. The profile carries company/billing identity, address, city, region, postcode, country, phone and billing email. Domain registrants may require additional provider-specific fields; an incomplete profile must not be replaced with invented data.
The customer workspace groups overview/next actions, contact, services, domains, billing, account staff, emails, files and activity. Select the exact service or domain in its resource switcher. Outstanding invoice labels appear only when the actor has billing permission and the owner, seller and currency match. Labels are display aids and do not change financial state.
Delegate customer access
An account owner can use My account → Team; authorised staff can manage team members from the owning customer's workspace. Each member has a separate email, password and session. Permission groups are services view/manage, domains view/manage, billing view/pay, orders, support view/manage, profile and team management. Management permissions add their required view dependency.
A delegated manager can grant only capabilities they already hold and cannot edit their own access or a member with stronger permissions. An inactive owner blocks delegated access. Changes invalidate that member's existing sessions. Changing their email clears verification. Invitation/setup mail requires an active account and the owner's verified security mail route.
Review as the customer
Login as client uses the protected, audited staff impersonation workflow. A handoff does not turn the staff member into the customer or grant unrestricted security changes. Password, team, profile-sensitive and certain financial changes remain blocked during impersonation. End the impersonation when the review is complete.
Test and troubleshoot
Create a disposable staging owner and a billing-only team member. Confirm that permitted invoices are visible while hosting credentials and unrelated accounts are denied. If invitation mail is missing, inspect the stored security route and original outbox record before generating another invitation. Keep customer files and screenshots out of public support posts.