Model permissions: a best-practice guide for agencies
Giving models the right level of access builds trust without compromising your agency's data. Here's how to set up permissions that work for everyone.
One of the most common mistakes new agencies make is giving models either too much access or too little. Too much, and you risk exposing sensitive business data. Too little, and models feel micromanaged and distrusted — which leads to churn.
Getting permissions right is a balance, and it's one of the most important management decisions you'll make.
What permissions should models have by default?
For most agencies, a sensible default is:
- **View their own earnings** — Models should always be able to see what they've earned. Transparency here builds trust.
- **Access group chat** — Communication is essential. Models should be able to reach their agency and teammates.
- **Request payouts** — If your agency processes payouts on request, models should be able to submit requests.
What should be restricted by default?
- **View other models' earnings** — This creates unnecessary comparison and competition.
- **Access platform credentials** — Models don't need to see the API keys or account details for platform integrations.
- **Manage agency settings** — Only agency owners or designated sub-admins should have this access.
Sub-admin permissions
For senior models or team leads, consider a sub-admin role with expanded permissions:
- View all model earnings (useful for team leads managing a sub-group)
- Manage platform connections
- Approve or reject payout requests
The trust-building approach
Start restrictive and expand permissions as trust is established. This is much easier than trying to claw back access after you've given it. When a model has been with your agency for 3–6 months and has demonstrated reliability, consider expanding their access.
Communicating your permission structure
Be transparent with models about what they can and can't see, and why. "You can see your own earnings but not other models' because we protect everyone's privacy equally" is a much better message than leaving models to wonder what they're missing.
A clear, fair permission structure is one of the foundations of a well-run agency.