A proxy mapping is only useful when it is written down and checked. This walkthrough covers assigning one route per profile, recording ownership, verifying the setup during a batch launch, and keeping the mapping accurate as the team grows.

Why per-profile proxy mapping matters for multi-account teams

Assigning a proxy to each browser profile is less about a single settings screen and more about keeping a reliable record. Each account in a multi-account workspace has its own region, its own owner and its own working hours. If the route behind a profile is chosen from memory at launch time, two operators will eventually make different choices for the same account, and the resulting inconsistency is hard to debug after the fact.

Ask an experienced operator what a messy morning looks like and the answer is rarely strategy. It is switching between logins, confirming that the right session is attached to the right account, and re-checking work somebody else already did. A clear approach to per-profile proxy mapping is what turns those repeated checks into a short, boring, repeatable routine for cross-border ecommerce operators.

There is also a people dimension. When only one laptop holds the working context, a holiday, a hardware replacement or a new teammate can stall the whole operation. Cloud account sync and role-based permissions address the people side, while isolated sessions address the technical side. Both are needed before assigning a proxy to each browser profile can be considered done.

  • One isolated profile per account, with separate cookies, cache, local storage and bookmarks.
  • One recorded proxy route per profile, reviewed whenever the account's region changes.
  • Role-based permissions that match what each teammate actually does.
  • Cloud sync so the workspace does not depend on a single laptop.
  • Batch launch to remove repetitive opening and closing of profiles.
  • A written owner for every account and a short handover note.

A short definition

For this guide, per-profile proxy mapping means the documented set of conventions that keep browsing state, network routes and human permissions attached to the right account. It is a process, not a single setting.

Defining it this way makes the rest of the article testable: each section below describes something you can check in a workspace rather than a claim you have to take on trust.

  • One isolated profile per account, with separate cookies, cache, local storage and bookmarks.
  • One recorded proxy route per profile, reviewed whenever the account's region changes.
  • Role-based permissions that match what each teammate actually does.

How assigning a proxy to each browser profile works in a Chromium-based workspace

Start by treating the profile as the unit of configuration. In MetaDesk, every account runs in an isolated session with separate cookies, cache, local storage and bookmarks, and each profile can carry its own proxy setting. That means the route is a property of the profile, not of the person launching it. Once that principle is written into your access policy, cloud sync and batch launch preserve the mapping instead of erasing it.

It helps to describe what isolation is not. It is not simply a second window, and it is not a private tab that forgets everything on close. It is persistent, separate storage per account that survives restarts and can be handed to a colleague. That persistence is exactly why assigning a proxy to each browser profile needs a naming and ownership policy.

The network layer is separate again. Assigning one proxy route per profile keeps the connection consistent with the region an account belongs to, and documenting the mapping prevents the most common configuration drift. Add ad campaign grouping and bookmark sets on top, and per-profile proxy mapping becomes a system an agency can explain to a new hire in one sitting.

  • Chromium rendering keeps pages familiar for new teammates.
  • Isolation covers persistent state, not just separate windows or tabs.
  • Bookmark management keeps each account's shortcuts in the right profile.
  • Ad campaign grouping organises logins by client or brand.
  • Windows and macOS clients share the same workspace model.

Why the profile is the right unit

Profiles are the smallest thing that can hold session state, a bookmark set, a proxy route and a permission at the same time. Making them the unit of configuration keeps per-profile proxy mapping understandable for a new teammate.

Group profiles by client or brand for batch work, but keep the individual profile as the place where settings live. Grouping is for convenience; isolation is per profile.

  • Chromium rendering keeps pages familiar for new teammates.
  • Isolation covers persistent state, not just separate windows or tabs.
  • Bookmark management keeps each account's shortcuts in the right profile.

Step-by-step: assigning a proxy to each browser profile

A setup run should produce something you can hand to a new teammate, not a set of steps only the original operator remembers. Keep the order fixed: define conventions, create profiles, attach routes, assign roles, then verify. Skipping straight to the launch is the most common reason a rollout has to be repeated.

Write the outcome of each step into your access policy as you go. The point of the sequence is that per-profile proxy mapping stays inspectable. If a profile has no recorded owner or no recorded route, it is not finished, regardless of how well it launches today.

  • Keep the step order fixed so every operator produces the same result.
  • Write decisions into the access policy as you make them.
  • Pilot with ten accounts before scaling to the full set.
  • Define what a finished profile looks like before you start.
  1. Define the naming conventionWrite a pattern such as client-brand-platform-role and apply it to every profile. A readable name is what makes a large workspace navigable.
  2. Create one profile per accountAdd each account as its own isolated session so cookies, cache, local storage and bookmarks stay separate from day one.
  3. Attach a proxy route to each profileAssign the network route that matches the account's region and record the mapping in your access policy rather than in memory.
  4. Record ownership and permissionsName the account owner and the second-factor holder in your own policy, then invite teammates with the minimum role they need.
  5. Enable sync and schedule an exportTurn on cloud account sync for portability and set a recurring profile export for recovery. Test a restore at least once.
  6. Batch launch and verify isolationLaunch a small group together, confirm that saved state does not cross over, and only then add the remaining accounts.

After the pilot

Once ten profiles pass the verification step, clone the conventions rather than the profiles. Each new account still gets its own session, route and owner; only the pattern is copied.

Re-run the isolation check after any client update or device change. It takes two minutes and catches the configuration drift that otherwise surfaces during a busy working session.

  • Keep the step order fixed so every operator produces the same result.
  • Write decisions into the access policy as you make them.
  • Pilot with ten accounts before scaling to the full set.

Pre-scale checklist for per-profile proxy mapping

Scaling exposes whatever was informal. A convention that worked for eight profiles usually survives on memory; the same convention across eighty profiles needs to be written down and checked. Use the list below as a gate before adding the next batch of accounts.

If a row fails, fix it before continuing. The cost of pausing a rollout for an hour is small compared with unpicking a naming or permission mistake across a full workspace.

  • Every profile has a name following the documented convention.
  • Every profile has a recorded owner and second-factor holder in your policy.
  • Every profile has one proxy route, and the mapping has been reviewed this month.
  • Roles follow least privilege, with exceptions recorded and dated.
  • Cloud sync is enabled and a scheduled export has been restored once.
  • Isolation was verified with two profiles launched together.
  • A joiner and leaver checklist exists and has been used at least once.
CheckWhat good looks likeOwner
Naming conventionEvery profile follows client-brand-platform-roleWorkspace admin
Proxy mappingOne route per profile, reviewed this monthAccount owner
PermissionsLeast privilege, exceptions dated and ownedTeam lead
Sync and exportSync on, export scheduled, restore testedWorkspace admin
IsolationTwo-profile launch shows no shared stateOperator

Making the review stick

Put the checklist in the same place as the access policy and give it a recurring owner. A checklist that depends on someone remembering to open it will be opened twice.

Keep failed rows visible until they are fixed. Hiding them makes the review feel complete while the underlying per-profile proxy mapping problem remains.

  • Every profile has a name following the documented convention.
  • Every profile has a recorded owner and second-factor holder in your policy.
  • Every profile has one proxy route, and the mapping has been reviewed this month.

Common mistakes with assigning a proxy to each browser profile and how to fix them

Mistakes cluster around handovers. A profile created carefully by one operator is often reused loosely by the next, and the degradation is invisible until an account lands in the wrong context. Formalising the handover is therefore part of assigning a proxy to each browser profile, not an optional extra.

Treat every fix as a change to the default, not a one-time correction. Fixing a single profile helps today; changing the template helps every profile created afterwards.

  • Fix the template, not just the single profile that failed.
  • Record why an exception exists and when it should be reviewed.
  • Re-test isolation after any client update or device change.
  • Keep the review short enough that it actually happens weekly.
MistakeWhy it hurtsFix
Reusing one profile for several accountsShared cookies and local storage make sessions ambiguousOne isolated profile per account
Choosing proxy routes from memoryTwo operators pick different routes for the same accountRecord the mapping in the access policy
Leaving permissions wide openAccess survives role changes and offboardingLeast privilege plus a monthly review
Naming profiles after peopleNames stop making sense after a reorgName after client, brand, platform and role
Treating sync as a backupA sync error has no point-in-time recoverySchedule exports and test a restore

Turning fixes into defaults

Whenever you correct a profile, ask what would have prevented the mistake. Usually the answer is a template, a required field in the naming convention or a step in the handover checklist.

Update the default and note the change in the access policy. That is how a one-off cleanup becomes a lasting improvement to assigning a proxy to each browser profile.

  • Fix the template, not just the single profile that failed.
  • Record why an exception exists and when it should be reviewed.
  • Re-test isolation after any client update or device change.

Metrics that show whether per-profile proxy mapping is working

It is easy to declare a rollout finished and never measure it. A handful of simple numbers tells you whether per-profile proxy mapping actually changed daily work or merely added a new tool. Collect a baseline before the change, then repeat the same measurements two weeks later.

Keep the set small. Four metrics that someone will actually record beat twelve that nobody opens. The table below uses measures you can time with a stopwatch and count in the workspace, without any instrumentation project.

  • Measure a baseline before changing anything.
  • Prefer rates and times over raw counts.
  • Ask operators what still feels confusing each week.
  • Repeat the same measurement two weeks after rollout.
MetricWhat to compareHow to collect
Time to first correct launchNew teammate before vs after rolloutStopwatch during onboarding
Profiles with a recorded ownerPercentage of total profilesMonthly workspace review
Mapping reviews completedPercentage of routes reviewed this monthMapping table with dates
Handovers needing helpCount per weekShort weekly team note
Recovery timeMinutes to restore a profile from exportScheduled restore test

What a good baseline looks like

A baseline does not need to be precise. Time one onboarding session, count how many profiles have a recorded owner, and note how many handovers needed help last week. Three rough numbers are enough to show whether the change helped.

Keep the same definitions at the follow-up. If you change what counts as a handover between measurements, the comparison tells you nothing about per-profile proxy mapping.

  • Measure a baseline before changing anything.
  • Prefer rates and times over raw counts.
  • Ask operators what still feels confusing each week.

When to change the process

If two weeks of measurement show no improvement, look at the step people skip rather than the tool. In most teams that is the ownership record or the proxy mapping, and both are documentation problems with documentation fixes.

Change one thing at a time and measure again. Stacking several process changes at once makes the next result impossible to interpret.

  • Measure a baseline before changing anything.
  • Prefer rates and times over raw counts.
  • Ask operators what still feels confusing each week.

Windows and macOS: deployment notes

After installing on a second platform, run the same isolation check you used on the first. Two profiles, two distinct bookmark sets, two proxy routes, one batch launch. The point is not to test the app in the abstract but to confirm that your configuration survived the move.

Then confirm cloud sync from the other device. If profiles, routes and permissions appear as expected, per-profile proxy mapping is portable. If they do not, fix the sync configuration before adding more accounts.

  • Use the official installer for each operating system.
  • Keep Windows and macOS clients updated together.
  • Apply one written policy on both platforms.
  • Verify isolation and sync once on each client after installation.
  1. Install from the official sourceUse the official Windows or macOS installer and record the version you deployed on each machine.
  2. Re-create the pilot profilesSet up two profiles with distinct bookmark sets and proxy routes, mirroring the conventions used on the other platform.
  3. Run the isolation checkLaunch both profiles together and confirm neither sees the other's saved state after a restart.
  4. Confirm sync across devicesOpen the workspace from the other platform and verify profiles, routes and permissions appear unchanged.

One policy, two clients

Differences between platforms should be limited to installation and version notes. Conventions, ownership records and role definitions belong in a single document that both Windows and macOS users follow.

If a setting appears on one client but not the other, check versions first. Most apparent cross-platform differences are update gaps rather than product limitations.

  • Use the official installer for each operating system.
  • Keep Windows and macOS clients updated together.
  • Apply one written policy on both platforms.

See it in action

proxy
proxy · webdav asset
MetaDesk Feature Multiple Accounts Mobile
MetaDesk — Feature Multiple Accounts Mobile · webdav asset

Frequently asked questions

Does MetaDesk Browser (Sidest Browser) support both Windows and macOS?

Yes. MetaDesk provides Windows and macOS clients that share the same workspace model, so profiles, cloud sync and role-based permissions behave consistently across a mixed-device team. Use the official installer for each platform and keep clients updated together.

Can teammates share a workspace without mixing account state?

Yes. Every account runs in an isolated session with separate cookies, cache, local storage and bookmarks. Team collaboration adds roles on top of that isolation, so a colleague can launch a profile without inheriting another account's saved state.

What should be written down before a rollout?

At minimum: the profile naming convention, one proxy route per profile, the owner and second-factor holder for each account, the role definitions, and the joiner and leaver steps. Six lines of documentation prevent most of the rework described in this guide.

Is there a free way to try per-profile proxy mapping?

Yes. MetaDesk offers free registration, so you can build a small workspace with a couple of real accounts and test isolation, cloud sync, batch launch and permissions before making any commitment. Confirm current plan details on the official pricing page.

How often should the workspace be reviewed?

A ten-minute monthly review of permissions, proxy mappings and stale accounts covers most teams, alongside a weekly check that isolation still holds after updates. Add a scheduled profile export and test a restore at least once so recovery is proven.

Should two profiles ever share one proxy route?

As a default, no. Give each profile its own route and record it. If your organisation deliberately groups accounts under one route, document the reason, the owner and the review date explicitly, so the exception does not quietly become the rule.

How often should the proxy mapping be reviewed?

Review it whenever an account changes region, a provider is replaced, or a teammate leaves. A short monthly pass over the mapping table is usually enough to catch drift before it affects a working session.

Put this workflow into practice

One Chromium workspace, isolated profiles for every account, and a team that can actually share them.

Sign Up Free Download