The key difference in BrightPay Cloud is that you need to assign an access rule to each resource, specifying which employees or departments can view it. 

If you want to upload documents that only specific clients can see on the Client Portal, there is a way: 

• Create a dedicated department (e.g., “Documents” or a name of your choice) and ensure no employees are assigned to it. 
• Then, apply an access rule to the resource, granting access only to that department. Since no employees are in that department, they won’t see the resource in the Employee Self-Service Portals (EESSPs), but users on the Client Portal will be able to view it.

Additionally, you can choose to untick the box labeled "Make this resource visible to employees who have access," if you want to restrict internal employee visibility further. 

This approach helps control who can see the documents while ensuring clients can access their resources securely.