Team

Team is where your organisation sees who has access, invites new people, changes a member’s role, or removes access entirely. A separate page lets an invited person accept their invitation.

What’s on the page

• An invite-a-member form (email and role), shown only to Owners and Admins.
• A members table: email (marked “(you)” for your own row), role, when they joined, and per-row actions.
• An invitations table, visible to Owners and Admins only: email, role, status, expiry, and actions to resend or revoke.
• A separate page at Your invitationsfor the invitee’s side: one card per pending invitation with the organisation name, role, expiry, and an Accept button.

Every destructive or editing action opens a modal dialog with a Cancel button, a close control, and Escape support — never a native browser confirmation.

What you can do

Invite a member

Owner or Admin. An Owner can assign any role; an Admin can assign Engineer, Finance, Executive or Viewer, but never Owner or Admin.

Change a member’s role, or remove them

Gated per row: you need to be able to assign the role that person currently holds. Removing someone is immediate and irreversible — the confirmation dialog says so directly.

Resend or revoke an invitation

Owner or Admin, and only while the invitation is still pending or has expired.

Accept an invitation

Any invited person, from the Your invitations page. Nothing joins automatically — you have to click Accept.

How to read it

• There are six roles — Owner, Admin, Engineer, Finance, Executive and Viewer. Finance and Executive are narrow, function-scoped roles rather than points on a simple ladder from Owner down to Viewer.
• What the interface shows or hides is a convenience, not the security boundary — every action is re-checked by the server independently of what buttons you can see.
• Submitting the same invitation twice — a double-click, a retry — replays the original invitation rather than sending a second one.
• A role change carries the version you last saw; if someone else changed the same member’s role first, you’ll be told rather than silently overwriting it.
• Resending an invitation invalidates the previous link and restarts its expiry at seven days from that moment.
• If an invitation was accepted, revoked, or expired between when you loaded the page and when you click Accept, you’ll see that outcome directly rather than a confusing success.
• Accepting an invitation also switches your active organisation, but only once the server has validated the invitation — never purely on the click itself.

Before your first scan

The members table is never empty — every organisation always has at least its creator, as Owner. The invitations table shows “No invitations yet” until you send one, and doesn’t appear at all for roles below Owner/Admin. Your invitations shows “No pending invitations” with a link back to the dashboard.