The partner tier lets a single Ayliea account own and operate multiple client workspaces from one place. It’s designed for vCISOs running fractional security programs across several clients, MSSPs delivering ongoing monitoring, and security consultancies handling assessments for multiple firms. If you’re managing a single client, the standard Business plan is the right fit. The partner tier becomes worthwhile once you’re juggling three or more.Documentation Index
Fetch the complete documentation index at: https://docs.ayliea.com/llms.txt
Use this file to discover all available pages before exploring further.
What it gives you
- One subscription, many workspaces. Your partner subscription covers a defined number of managed client workspaces — no per-client billing to chase.
- Independent client workspaces. Each managed workspace is fully isolated: its own assessments, evidence, recommendations, members, and access controls. You hold an owner-level seat in every one.
- One-click workspace switching. Swap which client you’re operating as from the account menu in the sidebar. The whole app reloads in the new client’s context — no second-guessing whose data you’re looking at.
- Operator-mode banner. When you’re inside a client workspace, an amber banner at the top of the app reads “Operating as Acme Corp.” It includes a one-click switch-out so you always know whose hat you’re wearing.
- Per-client branding. Each workspace can carry its own logo, brand color, accent color, and email-sender display name. Reports come out in the client’s brand. Outbound invitations show the client’s name, not “Ayliea.”
- Partner-attributed audit trail. Every action you take inside a client workspace is recorded with a partner-operator marker — the audit trail distinguishes work the partner did from work the client’s own team did.
Adding a managed workspace
Once your partner subscription is active, a Manage workspaces link appears at the top of the account menu in the sidebar. It opens your partner dashboard.Open the partner dashboard
Click your account chip in the sidebar, then Manage workspaces at the top of the popover.
Click 'Create managed org'
The button is in the dashboard header. If you’ve already used your full quota, it’s disabled until your subscription is upgraded.
Enter workspace name and client owner email
The workspace name is what appears in reports and the operator banner. The email belongs to the person at the client who’ll be the account owner — they’ll receive an activation invitation.
Submit
The workspace is provisioned with all Business-tier features. You’re automatically added as an owner. The active workspace switches into the new client and the app reloads — you land inside the freshly-created workspace ready to start an assessment, configure branding, or invite additional members.
Switching between client workspaces
The account-menu chip in the sidebar opens a popover. For partner accounts, a Workspaces section appears at the top listing every workspace you can switch into, with:- Workspace name and your role
- A checkmark on the currently active workspace
- A one-click switcher — click another workspace to swap
Operator-mode banner
Whenever you’re inside a managed workspace (i.e. one your partner subscription provisioned), an amber banner appears at the top of the app:Operating as Acme Corp — actions you take are attributed to this client workspace. [Switch workspace →]The banner is partner-only — regular Ayliea users never see it. It’s hidden when you’re inside your own partner workspace and only appears when you’ve actively switched into a managed client. The “Switch workspace” link returns you to the partner dashboard. This is one of the most useful pieces of UI in the partner tier. It prevents the most likely operator mistake: sending an email, generating a report, or updating a control thinking you’re inside Client A’s workspace when you’re actually in Client B’s.
Branding a workspace
Each managed workspace has independent branding settings:| Setting | What it affects |
|---|---|
| Logo | Sidebar logo, report covers, dashboard header |
| Brand color | Primary accent across the app and reports |
| Accent color | Secondary accent — used for callouts, progress bars, and lighter accents in reports |
| Email sender name | Display name on outbound transactional emails (invitations, share-link OTPs, scheduled report deliveries) |
The email sending domain is shared across all workspaces today. Fully partner-owned sender domains via DNS verification are on the roadmap.
Audit trail
Every action you take inside a managed workspace is recorded in that workspace’s audit log with a partner-operator marker. You can filter the activity log by partner-attributed actions to see only the work the partner team performed. This makes it straightforward to:- Report on partner-delivered work for invoicing or scope review
- Distinguish client self-service activity from partner-managed activity
- Investigate the source of a change if a client questions an action
What’s not in the partner tier today
The partner tier is in active development. The following capabilities are on the roadmap but not shipped yet:- Per-partner sender domains. Outbound emails currently send from the shared Ayliea domain (with per-workspace display name). True partner-owned sender domains via DNS verification are planned.
- Cross-workspace dashboards. Each client workspace is independently scored today. A consolidated “view all clients’ posture” dashboard for the partner account itself is planned.
- Bulk operations. Bulk reassessment, bulk evidence updates, and bulk report generation across many client workspaces are planned for later phases.