Manage members and roles
Create a least-privilege role, invite a member, and manage active or suspended access.
Scenario and success criteria
Example: A temporary operator manages reservations for one branch. Create a role with reservation view and edit access first. Invite the member to that branch scope. Use a test account to confirm that other branches and delete actions are unavailable. At contract end, suspend the member and test that access is blocked.
Review unnecessary full access, unused active accounts, invitation completion time, and access-related support requests. The goal is not the fewest permissions. The role must allow only the actions needed for the assigned work.
Before you start
- Select the organization or branch for the member.
- List every required view, create, edit, and delete action.
- Confirm a company email address that the member can receive.
Create the role first
Open Roles, then enter a name that describes the work. Add only the required features and actions. Reserve full access for administrators who manage all operations.
Invite the member
Open Members, then select Add. Enter the name, email, and new role. Confirm the current organization as the intended scope, then send the invitation.
Confirm account activation
Ask the member to open the email invitation and set a password with eight or more characters. Confirm that status changes from Invited to Active.
Test actual access
Sign in with the member account. Review the organization switcher and sidebar. View one permitted record and complete one required action. Confirm that excluded organizations and features remain hidden.
Change or stop access
For changed work, assign the new role and repeat the test. For immediate removal, select Suspended. Return the member to Active only when access resumes.
Before deleting a member, transfer assigned conversations, reservations, and operating records. Use Suspended instead of deletion when records must remain.
Check the result
- The member can select only the intended organizations or branches.
- The role contains only required features and actions.
- The invited member sets a password and reaches Active status.
- The member cannot access excluded menus, records, or actions.