Scaling n8n as an agency: collaboration & access-control options?

We’re an AI automation agency running n8n as the backbone of our client delivery, and we’re hitting a wall as we scale. I’d love to hear how other agencies have solved this.

Our situation:

  • We run a growing number of separate client instances.
  • We need 2–3 team members collaborating within the same project — not always the same workflow, but tightly coordinated, interdependent ones.
  • On self-hosted Community Edition, there’s no RBAC and no project/workflow sharing: only the admin sees all workflows, while other users only see their own. So team members can’t work on each other’s workflows, which makes collaborative, multi-client delivery basically impossible.

We’re trying to find the right-sized setup for this — something proportionate to a team that needs to collaborate, without over-engineering it.

My questions to the community:

  1. If you run an agency on n8n across multiple clients, how is your access/collaboration set up? One shared instance with projects + roles, or an instance per client?
  2. Is there any supported way to get team collaboration (shared projects / multiple editors) on Community, or a proportionate paid option for a small team — short of jumping straight to Enterprise?

If you’re scaling n8n as an agency and run into the same thing, a quick note on your setup (or an upvote so n8n sees the demand) would help a lot. :folded_hands:

1 Like

@fernandesnoa right, Community has no projects or RBAC, single admin and everyone else siloed. what you want, a shared project with multiple editors, is the Project Editor role, which is on Cloud Pro and self-hosted Enterprise. so short of Enterprise the proportionate option is Cloud Pro, projects with multiple editors and per-project roles on one instance, exactly your 2-3 people on interdependent workflows. on self-hosted theres no middle tier though, projects/RBAC only come with the Enterprise license. and one shared instance with projects beats an instance per client, the per-project roles wall each clients work off while your team shares what they need.

Hi @fernandesnoa

The most sustainable model for you is a split architecture:

  1. Agency Sandbox (Paid Business/Pro Plan): A single, high-powered instance where your team collaborates, builds templates, and tests new AI agents. This is where your “R&D” happens.
  2. Client Production (Community Edition): Once a workflow is perfected in the Sandbox, it is deployed to a lightweight, isolated Community instance for the client.

This should give you the best of both worlds

1 Like

The collaboration side has solid answers above, Cloud Pro projects or the sandbox-plus-CE split. The part that bit us hardest as the instance count grew was not access, it was visibility. Once every client sits on their own isolated Community instance, there is no single place that tells you when one of them quietly stopped doing its job. A workflow sits deactivated after a restart, or a credential expires and the runs just stop, and on CE nothing surfaces that across instances. With 3 clients you notice. With 20 you find out when the client emails. Whatever architecture you land on, I would put a flat external check on top that watches each client’s critical flows from the outside and pings you when an expected run does not happen, so silence becomes an alert instead of an assumption. The split model is the right call, just do not let the isolation hide a dead flow.

1 Like

Thanks for the input everyone!

@achamm that confirms it: on self-hosted there’s no middle tier, and projects + per-project roles on a single instance start at Cloud Pro. For where we are now (small team, no clients needing access yet), we’re staying on Cloud Pro and organising clients into folders within projects, then revisiting once we outgrow it (or the partner program is launched).

@kjooleng love the sandbox-vs-production split, parking that as our scale-up option, since it keeps collaboration and cost separate nicely.

2 Likes

Cloud Pro is the right call for your stage. One thing worth noting for when you eventually move workflows to client Community instances: n8n’s source control (git integration) is available on Enterprise tier, but for Community you can manually export workflows as JSON and version them in a private git repo. It’s a manual process, but it at least gives you version history and a way to push tested workflows from your Pro sandbox to client instances without rebuilding them. Keeps the two-tier setup kjooleng described functional as you grow.

@fernandesnoa your welcome, happy to help! if you need anything else, feel free to ping any one of us, if your good, feel free to mark any of the replies as the solution, and have a good day!

One extra bit I’d write down now is the boundary between collaboration and client authority.

Folders/projects help the team build together. They don’t replace a per-client handoff: who owns credentials, which workflows can write to CRM/email, who approves production changes, and what receipt proves a run happened. If that checklist lives in each client folder now, the later split into client instances gets much less painful.

One pattern that works well alongside the split architecture: use n8n’s REST API (/api/v1/workflows) to automate the deployment step. When a workflow is approved in your sandbox, a small deploy script can export the JSON and import it into the client’s Community instance via API, keeping credentials detached. This makes the “move from sandbox to production” step repeatable without manual export/import each time. Pair it with git for versioning and you have a lightweight deployment pipeline for workflow delivery - especially useful once you’re managing 10+ client instances.

Glad to be of help

I would separate two problems: build-time collaboration and post-launch ownership.

For build-time collaboration, Cloud Pro or Enterprise projects/RBAC is the cleanest path if you want multiple people editing the same client work. If cost or architecture pushes you toward one instance per client, then a shared agency sandbox plus isolated client production instances can work, but you need a disciplined promotion process.

For post-launch ownership, I would not let the n8n instance structure be the only source of truth. Agencies usually need a separate operating layer that answers:

  1. Which clients have which workflows?
  2. Which workflows are business-critical?
  3. Who owns each workflow?
  4. What checks prove the workflow is healthy?
  5. What issues are open, resolved, or recurring?
  6. What can be reported back to the client?

That is the exact agency problem I am building Maintain Flow around. It does not replace n8n projects/RBAC; it sits above the delivery stack so the agency can maintain client automations after launch without losing track across instances.