Manage members

Settings → Members (PEOPLE & ACCESS) is the workspace directory for invitations, active users, disabled accounts, and seat usage. KPI cards summarize total seats, active members, pending invites, and capacity against your plan.

Please note:

• You cannot change your own role or deactivate yourself — actions on your row are disabled.
• CSV and bulk-enter invites require a role selected before sending; default role is Member when available.
• With the employees module and employees.terminate, deactivating or removing a user can record an HR exit (reason and date).
• Members only see enabled modules — confirm Enable and manage modules before inviting.
• After assigning a role, set their post-login landing page under Start modules per role.

Invite members

Method	Steps
Single invite	Enter email → choose role → optional hire-onboarding fields → Invite → confirm in dialog (name, role, optional seats)
CSV upload	Select role → Upload CSV (email, optional firstName/lastName) → invitations sent per row
Bulk-enter	Bulk-enter opens Blaze grid (email, first name, last name, role) for many invites at once
Sample CSV	Download sample CSV for the expected column layout

Pending invitations appear under the Pending Invites tab with resend, set-password-and-activate, and cancel actions.

Accept invite wizard

When the invitee opens the link, they walk through a stepped flow aligned with the auth UI:

1. Welcome — greeting with their name
2. Create password — set password and accept terms (account is created here)
3. Hire onboarding fields (if selected on the invite) — one step each for items such as CNIC, resume, education, bank account, or emergency contact
4. Profile picture — when a photo step is included

After accept, they land as an Active member with the assigned role. See Manage employees and profiles for how onboarding documents attach to the HR profile. If Covenant hire-packet auto-send is enabled, signature documents go out at accept — Covenant hire packets.

Member table tabs

Tab	Contents
Active Users	Enabled members with role, 2FA badge, status switch
Pending Invites	Outstanding invitations
Disabled	Deactivated members eligible for reactivation

Columns include member profile, created date, last login, phone, role, 2FA status, active/disabled switch, and an actions menu.

Roles and security columns

• Role — inline dropdown updates via PUT /api/members/{id}/roles (requires users.update)
• 2FA — read-only badge: Enabled (green) or Disabled; encourage self-service setup via Account security, 2FA, and passkeys
• PIN — reset from actions menu when the member has a PIN (users.update); clears lockout for salesman portal PIN features

Member actions menu

Action	Description
Send Reset Email	Triggers password reset email
Reset Password	Admin sets new password (min 8 characters)
Reset PIN	Clears PIN and lockout
Replace Member	Hand off ownership to another user
Make External	Excludes member from payroll, attendance, HR reporting
View as this user	Admin impersonation (redirects to dashboard)
Deactivate / Reactivate	Toggles access; data preserved
Delete Permanently	Removes user from organization

Export and import

• Export — downloads JSON with members, roles, and permissions
• Import — uploads JSON from another tenant; creates missing roles, skips duplicate emails, preserves exported passwords

See also Add users and invite teammates for onboarding practices and Roles in Settings for permission bundles assigned here.

flowchart TD
  Invite[Invite email CSV or Blaze] --> Pending[Pending Invites tab]
  Pending --> Wizard[Accept: welcome password onboarding]
  Wizard --> Active[Active Users tab]
  Active --> Role[Assign role]
  Role --> Perms[Effective permissions via role]
  Active --> Deact[Deactivate]
  Deact --> Disabled[Disabled tab]
  Disabled --> React[Reactivate]

Seat limits by plan

Plan	Max users (approx.)
Free	3
Starter	10
Professional	50
Enterprise	Unlimited

KPI Total Seats compares active members plus pending invites against this limit.

Related articles

• Manage teams — assign members to teams after they join
• Roles, permissions, and RBAC — how permissions work
• Settings drawer overview — PEOPLE & ACCESS section