Managing people

Change abilities, revoke and reactivate access, resend invites, delete people, and allow password sign-in.

For: Administrators (the admin ability) · Last updated

Everything on this page happens in the member table at Settings → Administration → Team → Members, and needs the admin ability. Each row shows the person's name and email, their Role (abilities), their Status, and the actions that apply to that status.

Statuses#

Status Meaning
active The person has set a password and can use the product.
pending The person has no password yet. This includes people invited but not yet set up, and people who only ever sign in through single sign-on.
revoked Access has been withdrawn.

Revoked people are hidden by default. Select Show revoked (n) under the table to list them and Hide revoked to hide them again.

Change someone's abilities#

  1. In the person's Role column, tick or clear the checkboxes. See Abilities.
  2. A Save button appears as soon as the set differs from what is stored. Select it.

Saving replaces the person's whole ability set with the boxes you left ticked. The change applies to their existing session; they do not need to sign in again.

Keep at least one administrator in the company. Nothing stops you from clearing Admin on your own account.

Revoke access#

  1. Select Revoke on the person's row.
  2. Confirm in the dialog "Revoke name's access?": "They will be signed out immediately and won't be able to sign back in." Select Revoke access.

A revoked person cannot sign in with a password or through single sign-on, and their open sessions stop working at once. Their abilities stay on record and are shown as plain text.

Reactivate someone#

Select Show revoked (n), then Reactivate on the person's row. No new invitation is needed.

  • Someone who had already set a password returns as active.
  • Someone who was revoked while still pending returns as pending. Use Resend invite to give them a fresh link.

Resend an invite#

On a pending row, select Resend invite. A new setup link replaces the old one (the old link stops working) and is valid for 7 days. As with a first invitation, the page either shows "Invitation emailed to address." or a Setup link panel with a Copy button when the email could not be sent. See Inviting people.

Resend invite is offered only for pending people.

Delete someone#

Delete removes a person permanently. It is offered only on revoked rows, so revoke first, then select Show revoked (n) and Delete. The dialog "Delete name?" says: "This permanently removes them from the team. Their email will be free to invite again." Select Delete to confirm.

Let someone sign in with a password#

The Local (non-SSO) account (?) checkbox lets a person sign in with a password even when their email domain uses single sign-on. It appears only when the person's email domain has a verified single sign-on configuration, both on the invite form and on the person's row. Tick it and select Save to turn it on, or clear it and Save to send them back to their company's sign-in page.

See How sign-in chooses a method for how this setting affects the sign-in page.