Sharing & access — who sees what and who can do what

You're a digital agency managing websites for 20+ clients. Each client has their own site, their own cookie banner, their own legal documents. And each client has their own internal person — an admin who wants control over what happens on their website.

How it works in practice

Step 1: The client registers and owns their configuration

The client creates an account in the B2B zone and adds their domain. They are the owner of their configuration — full control over cookie banner settings, scenarios, cookies, and legal documents.

Step 2: The client shares access with the agency

The client invites the agency via email. Waulter looks up the user by email address and the client assigns a role:

• Admin — can change configuration, scenarios, cookies, documents. Full access to settings.
• Editor — can edit configuration and cookies, but cannot change sharing or delete the configuration.
• Reader — can view settings and reports, but cannot change anything. For review and audit.

Step 3: The agency works on the configuration

The agency worker logs into their own account and sees the client's domain on their dashboard. They configure the consent banner, set up scenarios, manage cookies — all within the permissions the client granted.

Step 4: The client retains full control

The client sees who has access, can revoke access at any time, and tracks change history. No shared passwords, no unauthorized access.

Step 5: The agency finishes and hands over

When the agency completes the setup, they can remove themselves from the share — the "Remove myself" feature. The client has full ownership, the agency has no access. A clean handover.

For agencies with many clients

The agency manages dozens of clients from one dashboard. Each client shares their configuration with the agency independently — the agency sees only what clients have permitted. A central overview of all domains, consent rates, and compliance status in one place.

Learn more about agency mode on the Multi-user & agency page.

Your company has marketing, legal, a dev team, and a DPO. Everyone needs access to consent management — but not everyone needs to change the configuration.

The problem: one password for everyone

In smaller companies, CMP login credentials are shared via Slack or email. The result: nobody knows who changed what, nobody has their own login, and when someone leaves, the password changes for everyone.

The solution: individual login for everyone

Waulter lets you invite any number of users and assign them a role matching their responsibility:

Who changed what and when

Every configuration change is recorded with information about who made it. Audit trail for sharing: who granted access to whom, with what role, when. During a regulatory inspection, you can prove that access to consent management is governed and traceable.

Waulter allows admins to remove themselves from a share. Why does this matter?

• Agency → client handover: The agency finishes implementation and the client takes over management. The agency removes themselves — a clean transition without the client having to delete anything.
• Employee rotation: A colleague is leaving the company. Before departure, they remove themselves from the share — and everything is documented in the audit trail.
• Temporary access: A contractor configures the cookie banner. After completion, they remove themselves. No forgotten access.

Sharing works via email address. Waulter looks up the user in the system:

• User already has an account — you add access immediately. They see the shared configuration on their dashboard.
• User doesn't have an account — you invite them via email. After registration, they automatically receive the access you assigned.

The entire process takes minutes, not hours. No tickets, no waiting for the IT department.

• No shared passwords — every user has their own login (Auth0).
• Granular roles — admin, editor, reader. Least privilege access.
• Audit trail — who granted access, to whom, with what role, when. Who revoked access. Who changed what.
• Instant revocation — access can be removed with a single click. Immediately, without delay.
• API access — sharing can be managed programmatically via REST API. Automate onboarding and offboarding.

For enterprise clients with stricter isolation requirements, we offer Private CMP — the entire Waulter platform on your own Azure tenant.