I have a user (client facing) that only gets access to 1 but gets added to all projects?

[Julie Moffitt]

I have setup a client role with browse only permission but for some reason they are automatically added to every project.  They only need to see one!  Help!?

[Jack Brickey]

Ensure the client is not in a group/role that is common for permissions across all projects. Remove the user from the group/role and create a unique group and place them in that and use that group in the one project.

[Dharma Ramos]

The user could be in a group that is being added as a default to a role upon new project creation. You can check your default members of project roles in Administration > System > Security > Project Roles. Look under actions and click on Manage Default members for the different roles.

As @Jack Brickey suggested, remove the user from group(s) that are being used across all projects or as default groups.

[anshu02]

I @Julie Moffitt, 

I think this is because the permission schemes for all of the projects is same. You will need to define new permission schemes for the project which you want to give access to this client. 

Don't use default permission scheme for the project which you want your client to have access. 

Thanks,