← Back to documentation

Organization User Management

Admin-focused workflows for organization access control and invitation management.

10 min read

Use this guide for organization administration tasks.

Purpose

This guide helps you:

  • Activate organization mode.
  • Invite users with role selection.
  • Update user roles.
  • Resend/revoke invitations.
  • Remove organization members safely.

Prerequisites and permissions

  • User Management requires ADMIN role.
  • Personal mode users must activate organization first.

Step-by-step workflow

1. Activate organization mode (if needed)

  1. Open Settings -> Organization.
  2. Create/activate organization with a unique name.

After activation, Organization and User Management become available.

2. Open user management

  1. Open Organization.
  2. Select Open user management (admins only).

3. Invite a user

In Invite user:

  1. Enter email.
  2. Enter username.
  3. Choose role (USER or ADMIN).
  4. Select Send invitation.

Rules:

  • Email must be valid and not already registered.
  • Username must be unique inside organization.
  • Invitation links expire after 7 days.

4. Update user roles

  1. Find the member in Organization users.
  2. Change role via role selector.

Guardrails:

  • Organization must always keep at least one active admin.
  • Removed users cannot be modified.

5. Manage pending invitations

In Pending invitations:

  • Resend issues a fresh token/email.
  • Revoke invalidates invitation.

Accepted invitations cannot be revoked.

6. Remove members

Use Remove on an active member.

Guardrails:

  • Admins cannot remove themselves.
  • Last active admin cannot be removed.

Expected result and verification checks

  • Invitations appear with role/status/expiry.
  • Accepted users appear in org users list with assigned role.
  • Role and invitation actions persist after reload.

Common issues and fixes

  • "Admin access required": request admin role from current admin.
  • Invite conflict: email/username already used.
  • Invite expired: resend invitation to generate a new token.
  • Remove action disabled: user is self, already removed, or last admin.

Related guides