The key difference in BrightPay Cloud is that you need to assign an access rule to each resource, specifying which employees or departments can view it. 

If you want to upload documents that only specific clients can see on the Client Portal, there is a way: 

• Create a dedicated department (e.g., “Documents” or a name of your choice) and ensure no employees are assigned to it. 
• Then, apply an access rule to the resource, granting access only to that department. Since no employees are in that department, they won’t see the resource in the Employee Self-Service Portals (EESSPs), but users on the Client Portal will be able to view it.

Additionally, you can choose to untick the box labelled "Make this resource visible to employees who have access," if you want to restrict internal employee visibility further. 

This approach helps control who can see the documents while ensuring clients can access their resources securely.

Q. I've uploaded some new resources for the 2026/27 tax year with a visibility date that has passed. They are available for users on the Client Portal but employees cannot view them in the Employee Portal. Why is this?

A. If no payslips have yet been finalised in the new 2026/27 tax year, then the resources can not yet be seen by employees in the Employee Portal, they can only be seen by Client Portal users. Once the first payslip in the new year has been finalised, the new resource will become visible to the employee(s) in the EESSP.

Q. Can I add a resource in the Employee Portal that is only visible by the Client Portal user and not by any employees?

A. Yes, both administrators and client portal users can add a resource and under the 'Access' section, choose the 'No access' option. This means that the resource can be saved and stored in the portal, but no employees will be able to view it. 

The same could be done with older / previous years' documents that you would like to hide from employees' view, but still keep them for reference. To change the access of a resource - select the resource > change the access settings to 'no access' > click 'OK' to save changes.