Manage your team

Users is for organization administrators. It contains the team roster, invitations, role and session management, user deactivation, and identity administration events.

Invite an employee

1. Open Users. You can also select Employees in your profile.
2. Select Invite.
3. Enter the employee’s Work email.
4. Choose an Organization role: Employee or Administrator.
5. Choose an Operations role: No access, View, or Administrator, if the module is available to the company.
6. Select Create invitation, then Done.
7. Check the entry in Invitations and grant the required file permissions separately.

The employee creates their own password using the emailed link. See the first sign-in guide.

Check delivery

An invitation has two separate states: link acceptance and email delivery. Accepted, Expired, and Revoked describe the invitation. Email queued, Sending email, Email sent, and delivery errors describe the email.

Note

“Email sent” means the mail server accepted the message. It does not confirm delivery to the inbox or that the employee read it.

Use the resend button when it becomes available. The recipient should open the latest email. You can revoke an unaccepted invitation using its trash-icon button.

If the creation response is lost, first check the invitation list. The invitation may have been saved. Do not create another one before establishing the previous invitation’s state.

Change roles or end a session

1. In the Organization roster, select Manage … for an active employee.
2. In Manage employee, update the appropriate roles.
3. Select Save roles and check the updated roster.

Changing roles ends the employee’s active sessions. Let them know they must sign in again. Changing your own roles also affects your current session.

In the same dialog, Active sessions lets you end an individual session. A loading error does not mean there are no sessions; select Retry.

If the application says another administrator is required, assign that role to another active employee first. You cannot leave the company without an organization administrator or remove the last Operations administrator.

Deactivate an employee

1. In the roster, select Deactivate ….
2. On the Impact step, review owned items, personal materials, permissions, sessions, public links, requests, and unfinished actions.
3. If a successor is required, select Choose successor and choose from the available employees.
4. Continue to confirmation and enter the employee’s work email exactly as shown.
5. Select Deactivate employee.
6. Wait for server confirmation. Check the time, successor, and archive in the receipt.

The personal file tree moves into the successor’s archive folder while preserving identifiers and provenance. Sessions and the listed capabilities are revoked. The deactivated employee remains in the roster.

Caution

If the data changed, recalculate the impact and confirm the current result. If the deactivation outcome is unknown, use Retry the same request without changing the original action.

View administrative events

Identity audit log shows recent invitation, role, session, deactivation, and MFA-enablement events. Each event includes a time, an actor, and the affected employee.

This is an identity administration log, not a complete list of financial or file activity. For a document, use its own history. For financial records, use the journal and balance movement history.

Roles and permissions · Account security · Files.