Skip to main content
Open Identity & Access → Users, Invitations, or Approvals. Listing members requires org.members.read. Every change on these pages requires org.members.manage.

Users

Users lists the members of the current workspace. The head counts the users, the active ones, and the ones that wait for approval. Search by name, email, or team, and filter by role or status. Open the menu at the end of a row for these actions: Some changes are refused:
  • nobody can change their own role, disable their own account, or remove themselves from the current workspace;
  • the root user, the account created at the first start from [auth].root_email, cannot be changed by organization administrators;
  • the last platform administrator cannot be disabled or deleted.
Switching to another workspace issues a new session for that organization. The ID and the slug of an organization never change, even when its name does.

Approvals

When the registration policy of the workspace lets people join by themselves and requires admin approval, a new account waits under Approvals. The Notifications bell in the top bar shows it too.
  • Approve activates the account.
  • Reject marks the account rejected. It cannot sign in, and the decision cannot be undone from this page.
When SMTP is configured, MoleSignal emails the administrators of the workspace about a new registration, and emails the person about the decision, in the default language of the workspace. A failed email never blocks the registration or the decision.

Invitations

Invitations records an email address with the role that the person should receive, and lists the pending invitations with the role, the status, the time sent, and who invited.
  1. Select Invite user.
  2. Enter the Email. When the workspace has email domains, the address must belong to one of them.
  3. Choose a Role, or keep Organization default, the role that self-service joining gives.
  4. Select Send invite.
Resend marks a pending invitation as sent again, and Revoke cancels it. An accepted invitation cannot be resent.
MoleSignal does not email an invitation, and an invitation does not create an account or a membership. The person joins through sign-up or single sign-on, and an administrator sets the role under Users.

Members API

Last modified on October 26, 2026