Agencies work with people who shouldn't see everything. A client wants to check their own numbers. A freelancer helps on one account. Until now, inviting them meant giving them a seat in your whole organization.
Workspaces now have their own roles. You can invite someone as an external member with access to just the workspaces you choose, either as a manager with full capabilities or with reporting access that's strictly read-only.
These permissions are enforced everywhere, including the AI side. A reporting-only user who connects Adside to their own tools gets reporting tools and nothing else, and every workspace action is permission-checked when it runs.