Client portal

The client portal gives a client’s contact person their own login into your own app, under your own branding. That person sees what is asked of them and what you are doing for them, the marketing overview you composed for them, the reports you published, and their own company’s subscriptions, invoices and domain names. Everything else stays invisible — not because somebody remembered to tick a box, but because the link to their company is what decides what they can ask for at all.

Where to find it

A login is given on the person: Contactpersonen (Contacts) → open the contact → the Klantportaal (Client portal) card.
The overview of every client login is under Instellingen → Team & gebruikers (Settings → Team & users), in the Klantlogins (client logins) section below your team: per login the clients it belongs to and whether the access is still live, with the same actions as the card and a link to the contact. It is a register, not a second editor: the person is edited on their own page.
Under Instellingen → Modules (Settings → Modules) the module is called “Klantportaal”.

Inviting someone

Make sure the contact is linked to at least one client. That link is exactly what they will be able to see.
Make sure they have an e-mail address of their own. Without one you cannot invite: “Deze contactpersoon heeft een e-mailadres nodig voordat je kunt uitnodigen.”
Press Uitnodigen voor portaal (Invite to portal). An account is created, given the Klant (Client) role, linked to this contact, and a mail in your own branding goes out with a link to set a password.
From then on the card shows a status: Geen toegang (No access), Uitgenodigd (Invited), Actief (Active) or Uitgeschakeld (Disabled). While the status is “Uitgenodigd” a Uitnodiging opnieuw versturen (Resend invite) button appears too.

What the client sees

The client signs in at the same web address, in the same branding, and lands on Jouw dashboard (Your dashboard): one column, top to bottom. With more than one company they get a company switcher at the top, showing the selected company’s own logo, and the whole dashboard shows one company at a time: every tile switches along.

Jullie taken (your tasks): the open tasks assigned to one of their own contact people, naming who.
Werkzaamheden (work in progress): the open work your agency is doing on their account, by urgency. A task is always in exactly one of these two tiles.
Jullie rapportage (your report): the cover of the latest published report, with open and download. A report that is not published yet is never visible to them.
Marketing: the overview your agency composed for them. They may move or drop tiles, but never add anything you did not expose.
Mijn abonnementen (my subscriptions): what they cost and when the next invoice comes, with a page of their own per subscription. Drafts and your internal notes stay hidden.
Mijn facturen (my invoices): open invoices first, then the most recent, with the same PDF you send out. An invoice with status Concept (Draft) is never visible to them.
Mijn domeinnamen (my domain names): the domain names on their account and when they renew.

In the menu, Klanten reads Bedrijven (companies) for a client login. What is for the agency alone never reaches them: the activity trail, a task’s labels, a project’s budget and burn, the repeat rule behind a planned task, and columns such as a domain’s registrar or a website’s hosting.

That is the whole write surface: comments on their own tasks, the layout of their own dashboard and menu, and their own notifications. Nothing else.

When a contact person is named in a comment, or a task assigned to them gets a comment, they are told. A client login gets that straight away by email by default, because the bell is not where a client lives.

Switching access off again

Toegang uitschakelen (Disable access) switches the login off without throwing anything away: the account, the link and the history all survive, and the button then reads Toegang opnieuw inschakelen (Re-enable access). There is deliberately no button that deletes a portal login.

Signing in as this contact

When a client says “I can’t find the report”, you do not have to guess. The same card carries Inloggen als deze contactpersoon (Sign in as this contact). You confirm first, then land on the client’s own dashboard for half an hour.

Your own session stays open; it is not replaced.
A banner sits on every screen: {you} is ingelogd als {client}, with a Stoppen (Stop) button.
The session can never do more than you can yourself. If you are seeing less than the client does, the banner says so: “u ziet minder dan zij: alleen wat uw eigen rechten toelaten”.
The start and the end land on the contact’s own activity trail (“logde in als …”, “beëindigde de sessie als …”), and anything you change meanwhile carries your name beside the client’s.

If you are already signed in as somebody else, you have to stop that first.

Permissions

Permission	What it opens	Default
`members.member.write`	The whole Klantportaal card: invite, resend, disable	Administrator
`portal.login.impersonate`	”Inloggen als de portaallogin van een klant”	Administrator

Both are set per role under Instellingen → Rollen (Settings → Roles). Signing in as a client never follows automatically from managing their login: those are two different acts. Somebody without members.member.write does not see the card at all.

The invited client gets the shipped Klant (Client) role: read access to their own data, plus commenting on their own tasks.

Good to know

The client portal is a licensed module. Without a valid licence, Uitnodigen voor portaal renders with a padlock and the badge “Niet inbegrepen” (Not included), opening a dialog that explains what to do on this deployment. Existing client logins keep working throughout: an expired licence makes the module read-only, not gone.
A client login linked to no company sees nothing at all, whatever its role holds. Instellingen → Team & gebruikers (Settings → Team & users) therefore badges such an account Ziet geen klanten (Sees no clients), and the Klantlogins register says the login is attached to no client and sees nothing.
Contacts are the only kind of portal subject today.
A contact outside your own client groups does not exist for you: you get “not found” rather than “no access”.