Beacon Agency
The organization holds the social accounts. Each client is a workspace. Editors are invited to one workspace.
What changed
Billing stays with the owner. A viewer can open analytics for their client and cannot create API keys outside that scope.
How the seats work
An editor can compose and publish inside the workspace they were invited to. A custom role can turn API keys or billing off without inventing a second kind of membership. The owner is not an invite role.