Overview
The Supplier Portal lets you share a one-click link with a supplier so they can view a purchase order, accept or propose changes, and upload documents — no Luminous account required. If you need to cut off that access (for example, the order changed significantly, the wrong contact received the link, or the PO was cancelled), you can revoke all live links in one step from inside the purchase order.
Where to find the Revoke Access button
- Open the purchase order from Inventory → Purchase Orders.
- Click the Supplier Response tab.
- Scroll down to the Who has a link section. This section lists every contact who currently holds an active link, along with when they last opened it and whether the link covers just this order or all of the supplier's orders.
- Click Revoke access (visible only when at least one active link exists).
- A confirmation dialog appears: "Revoke every link to this order? Nobody at this supplier will be able to open the order until you send a new link." Click Revoke access to confirm.
Once confirmed, you'll see a success toast and the section updates to show "No live links. Send a new one and the supplier can get back in."
What exactly gets revoked
Revoking is all-or-nothing — you cannot revoke on a per-contact basis. The reason is that a forwarded link is indistinguishable from the intended recipient's own, so revoking one contact while leaving others active would not meaningfully restrict access.
When you click Revoke access, Luminous simultaneously:
| What is cut off | What happens |
|---|---|
| Unclicked links sitting in the supplier's inbox | Marked as used immediately. If anyone clicks the link after this point, they receive an "Unauthorized" error and cannot log in. |
| Active sessions (the supplier is currently logged in or has already clicked their link) | Revoked immediately. Any further request the supplier makes is rejected. |
| Supplier-wide sessions | Also revoked. If a contact holds a link that covers all of this supplier's orders (not just this one), that broader session is taken too — otherwise access to this order would remain open through that wider credential. |
Links that were already clicked before you revoke had already been consumed (each link is single-use), so there is nothing to undo for those — their sessions are revoked alongside all others.
Sending a new link afterwards
Revoking does not permanently remove portal access from the supplier — it simply ends all current credentials. You can send a fresh link at any time by clicking Send portal link on the same tab. Each new send mints a brand-new single-use link per contact and emails it to the supplier contacts on file.
Tenant-wide disable
If you need to cut off every supplier across every order at once (for example, to take the portal offline for maintenance), an administrator can disable the Supplier Portal feature under Settings → Purchase Orders. Disabling the feature burns all unused emailed links and revokes all live sessions for the entire account instantly — not just for one order.