Supplier-wide portal access

When a Luminous admin sends a supplier a portal link for a purchase order, the session that link creates now grants access to all purchase orders and work orders that supplier has with your company — not just the single order the email mentioned.

The link opens directly on the order it was sent about. The same session also lets the supplier open their other orders with you, so they don't need a separate session for each one.

What stays the same

  • Each contact still receives their own individual link — a link cannot be shared between people.
  • The link is still single-use: once clicked, the one-time credential is exchanged for a session.
  • The admin's "Who has a link" panel still records which order each contact was emailed about, and which orders are flagged as "waiting on the supplier" in Luminous.
  • The link still expires after 72 hours if not used.

Revoking access

Open any of the supplier's POs, go to the Supplier Response tab, and find "Who has a link." It shows each contact, when they last opened the link, and what it covers ("All their orders" or "This order"). Click Revoke access to end the supplier's portal access across all of their orders. To restore access, send a new link from any of their POs.

Why this changed

Previously, a link scoped to one PO could not be used to view any other order, even one the same supplier owned. This meant a supplier with five open orders needed five separate emails and five separate browser sessions. The updated behavior lets them manage their full relationship with your company from one link.

Links sent before this change are not affected retroactively. Any existing credential in a supplier's inbox keeps exactly the access it was minted with and will not automatically gain supplier-wide reach when clicked.

Related articles