Your team and who sees what

What you need to know

Two roles

An owner reaches every company and can invite people, change roles, connect storage and remove a company. An administrator does the daily work.

Per-company access

An administrator reaches only the companies they are given. Someone hired to run one branch never sees the others.

Inviting

Open Administrators in the sidebar, choose Invite a person, add a name and email, pick the role, and tick the companies. They receive an invitation by email and sign in with Google, Microsoft, or by setting a password.

Changing or removing

The Manage button on any row changes role, standing and companies. Changes apply on their next click, not at their next sign-in.

The last owner

An account always keeps at least one active owner, so it can never be left with nobody able to administer it.

Give a client access to its company

Open All companies → the company → Client access. Owners can invite a client, choose their access level, resend an invitation or revoke access. Assigned administrators can read this list. Invitations expire after seven days; resending cancels the previous link. A delivery failure is shown beside the invitation.

• Client viewer can see that company's employees, existing training records, issued certificates and reports explicitly shared by the provider.
• Employee coordinator has the same view and can create or edit employees, import CSV files and select the company's existing job roles. Coordinators cannot delete or activate/deactivate employees or manage job-role definitions.

Neither client level can access courses, lessons, events, payments, integrations or course authoring. Clients cannot initiate or request enrolments, approve assignments, sign documents or invite others. Updating an employee can refresh internal workflow proposals; only the provider can approve the resulting training.

The client sees Overview, Employees, Training records, Certificates and Reports, with personal security and client-specific Guides. Each grant covers the entire selected company. Client access is separate from an employee's learner link and from employee job-role classifications.

Invitations and sign-in

Copy the company login link from Client access. The client accepts the invitation using the invited email. Existing Shog users reuse their sign-in identity, password, linked providers and configured MFA. Changing personal credentials applies across that person's memberships; removing access to one company does not delete their identity or another provider's grant.

The dedicated company login uses the provider's existing white label when entitled, and shows the company name. The verified custom domain serves it when available. Otherwise the link uses Shog's platform address. The footer contains language, Privacy and Terms. Clients do not receive an internal Administrator role.

Choose which reports clients receive

In Reports & Evidence → Share with clients, preview a finished saved document and share that copy. Policies must be signed, plans approved and evaluations signed. The copy is shared with all active clients of that company. Newer data or a newer document version does not automatically replace it.

Clients can view and download the shared copy while it remains shared and their access remains active. Unshare stops future access; copies already downloaded cannot be withdrawn. Signatures printed in the shared document remain part of it. Raw identity photos, separate signature files, assessment answers and internal inspection packages remain private.