Acting as (dev auth)

Pick a seeded user to try each role's permissions. Swap for SSO in production (apps/api/aspen_api/auth/deps.py).

Loading…

System

Loading…

Agency connections

One Blue Aspen Google account covers every client. Clients add it as a user on their GA4, Search Console, Tag Manager and Business Profile; each client's Connections tab then only needs their IDs. Tokens are encrypted and never shown again.

Google GA4 · Search Console · Tag Manager · Business Profile · Ads
BrightLocal agency API key

Action risk policy (enforced by the SafeExecutor)

ActionDescriptionRiskApproval typeWho can approve

Role permissions