Client logins and access

• Administrators see every site. Everyone else sees only the sites granted to them or their role.
• The REST API checks access for every request, so a client can’t open another client’s report.
• Give a client a user with the Report viewer role and grant them their site. They log straight in to their report, on desktop or phone, and don’t see the rest of wp-admin.
• Access can be given per user or per role, for each site, under Sites & access.
• People left without a role on a site no longer receive its scheduled reports.