The moment you add a second person to client performance work, a shared password stops being a shortcut. You cannot tell who changed a mobile budget, who ran a discovery job, or who should receive the renewal mail. A separate login for every subcontractor means more password resets and no shared view of the portfolio.
Apogee Watcher uses three roles per organisation so delivery staff, leadership, and read-only stakeholders each get the access they need without sharing one password. The same person can belong to more than one organisation with a different role in each.
What the three roles actually cover:
Admin: membership, billing, and subscription ownership, plus site and budget edits
Manager: day-to-day delivery (sites, discoveries, budgets, test history); can invite viewers only
Viewer: dashboards, results, and exports; cannot reconfigure alerts, pages, or invites
Invite the client as a viewer when you want them inside the same charts you use, not a forwarded PDF every month. Keep one or two admins per organisation for billing. Give a contractor manager access on one client workspace only. On the Free plan you cannot invite colleagues; paid plans add seats within plan limits.
Read-only mode is separate from roles. When no admin has an active subscription, everyone can still review historical tests, but Save and other edits are disabled until an admin renews.