Access to WebCert is via a user profile that has been set up in your name. As part of that profile, you will need to be assigned a role or roles that give you access to the database elements and processes available against that data. These Roles are defined by way of Permissions that are either enabled or disabled for that particular Role. Each Role created is configured as a Consultancy, Client or Project type role.
In each user profile, the user is assigned one or more Roles at the level of:
- Consultancy
- Client
- Project
In assigning roles to a user, you may only assign a "Client" type Role at the "Client" level for that user. Other roles may be assigned at other levels or further roles at the same level.
A Role assigned at the Consultancy level for a user will have access to all Clients and Client Projects able to process, view or report against project data subject to the permissions assigned to the role(s) held.
A Role assigned at the Client level for a user will have access to all projects for that particular Client (which is selected when you assign the role) and have no visibility of any other clients or their data set up on your WebCert licence.
Any Role assigned to a user at the Project level will be restricted to that individual Project.
The exceptions are where you have multiple roles at multiple levels assigned to a single user in which case the higher level roles take precedence of order over the lower level roles.

If a permission is disabled in a role at say Client level, but enabled in a role assigned at the Project level, then that user will be deemed to have that permission but only for that particular Project.
All of this provides for a totally flexible and customisable configuration of how you want your users to work with WebCert.