Documentation · For administrators
People and roles
The People area is where your organization’s membership is governed: who belongs, what role they hold, which departments they can reach.
Inviting someone
Invite by email, choosing a role and the departments they start with. The invitation arrives by email; on first sign-in the person lands provisioned with exactly what you chose. Pending invitations can be resent or revoked from the same surface.
Roles and the escalation rule
Three org roles: user, org admin, and super admin. Role changes follow a least-privilege rule enforced in the interface, on the server, and in the database: only a super admin can grant super admin, an org admin manages only the user and org admin levels, the last super admin can never be demoted, and demoting yourself asks you to confirm.
Deactivation
Deactivating a person is a reversible block, not a deletion: their access stops immediately, their work and history remain, and reactivating restores them. The same guardrails apply: an org admin can’t deactivate a super admin, and the last active super admin can’t be deactivated. Every role and status change is recorded to the audit log.
How to
Invite someone
- Open People and select Invite person.
- Enter their email and choose a role. Org admins can offer User and Org admin; only a super admin can offer Super admin.
- Pick the departments they start with, or leave it empty to grant access later.
- Send it. The invitation arrives by email, and it appears under pending invitations, where you can Resend or Revoke it.
Change a role
- Open the person’s row in People.
- Change Organization role. The guardrails apply as you’d expect: only a super admin can change a super admin’s role, the last active super admin can’t be demoted, and demoting yourself asks you to confirm.
Change department access
- Open the person’s row in People.
- Under Department access, click a department to toggle it; Granted means they have it.
Deactivate or reactivate someone
- Open the person’s row and find Account status.
- Select Deactivate. Their access stops on their next request; their agents, connections, and history are kept.
- Select Reactivate to restore them. The last active super admin can’t be deactivated, so an organization can never lock itself out.
All documentation · Everything above describes the product as it ships today. If something here doesn’t match what you see, tell us.
← Back to documentation