Users
Invite teammates and manage organization membership.
Invite a teammate#
- Open Settings → Users.
- Choose Invite User.
- Enter the email, optional name, and an appropriate role.
- Send the invite and monitor its pending state.
Owner is assigned after a user joins and only by an authorized owner. Pending invites can be revoked.
Manage a member#
Open a user to update display name or role. Email cannot be changed there. Remove membership only after checking the user’s devices and access-policy subjects; removal and device revocation are separate actions.
Use groups from identity provisioning as policy subjects when possible instead of maintaining one grant per user. Console role controls administrative capability; access policy controls application reachability.
If Invite or Edit is absent, your role can view users but cannot perform that action.