Administration

Users

Membership lifecycle: inviting, roles at a glance, site scoping, deactivation, and session revocation.

The user list

Users (Admin group) shows every member with role and status — active, invited, deactivated — with filters per status. Managing users requires the users-manage permission.

Invite

Invite sends an e-mail invitation with a role attached — the person lands in the organization with that role on first sign-in. Pending invitations can be resent or revoked from the row menu. Seats are a plan limit; the billing page shows usage.

Assign the least-privileged role that supports the person's work — the roles page shows exactly what each role can do.

The user page

A member's page collects their access and their footprint: role and effective permissions, site scope (below), plus activity, current reservations, and checked-out tools — the handover checklist when someone changes teams.

Site scope narrows a member to specific sites: scoped users see and touch only their sites' stock and work. Record a reason when changing sensitive access — it lands in the audit log.

Deactivate and revoke

Deactivate ends access immediately while preserving every historical attribution; reactivate restores it. For a lost device or a suspected compromise, revoke all sessions signs the member out everywhere without touching their membership. Departures: deactivate, then work through their holdings via the user page.