> ## Documentation Index
> Fetch the complete documentation index at: https://docs.molesignal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Members

> List the users of a workspace, change their roles, disable or remove them, approve sign-ups, and record invitations.

Open **Identity & Access → Users**, **Invitations**, or **Approvals**. Listing members requires
`org.members.read`. Every change on these pages requires `org.members.manage`.

## Users

**Users** lists the members of the current workspace. The head counts the users, the active ones, and
the ones that wait for approval. Search by name, email, or team, and filter by role or status.

| Column | Shows |
| - | - |
| **Role** | The role of the member in this workspace. |
| **Teams** | The [teams](https://docs.molesignal.com/en-US/identity/teams.md#teams) of the member. |
| **Login method** | **Password**, **OIDC**, or **SAML**. |
| **Last active** | The last sign-in, or **Never signed in**. |
| **Status** | **active**, **disabled**, **pending** (waits for approval), or **rejected**. |

Open the menu at the end of a row for these actions:

| Action | Effect |
| - | - |
| **View details** | Shows the identity, the memberships, and the access status of the member. |
| **Change role** | Sets the role of the member in this workspace, a built-in or a [custom role](https://docs.molesignal.com/en-US/identity/roles.md#roles). |
| **Disable user** | The account can no longer sign in to any workspace. Memberships and configuration stay. **Enable user** gives sign-in back. |
| **Remove member** | The member loses access to this workspace at once. The account itself stays. |
| **Approve** | Shown for a pending user. See [Approvals](#approvals). |

Some changes are refused:

* nobody can change their own role, disable their own account, or remove themselves from the
  current workspace;
* the root user, the account created at the first start from `[auth].root_email`, cannot be changed
  by organization administrators;
* the last platform administrator cannot be disabled or deleted.

Switching to another workspace issues a new session for that organization. The ID and the slug of an
organization never change, even when its name does.

## Approvals

When the [registration policy](https://docs.molesignal.com/en-US/settings/organization.md#registration-and-access) of the workspace
lets people join by themselves and requires admin approval, a new account waits under **Approvals**.
The **Notifications** bell in the top bar shows it too.

* **Approve** activates the account.
* **Reject** marks the account rejected. It cannot sign in, and the decision cannot be undone from
  this page.

When SMTP is configured, MoleSignal emails the administrators of the workspace about a new
registration, and emails the person about the decision, in the default language of the workspace.
A failed email never blocks the registration or the decision.

## Invitations

**Invitations** records an email address with the role that the person should receive, and lists
the pending invitations with the role, the status, the time sent, and who invited.

1. Select **Invite user**.
2. Enter the **Email**. When the workspace has [email domains](https://docs.molesignal.com/en-US/identity/sso.md#email-domains), the
   address must belong to one of them.
3. Choose a **Role**, or keep **Organization default**, the role that self-service joining gives.
4. Select **Send invite**.

**Resend** marks a pending invitation as sent again, and **Revoke** cancels it. An accepted
invitation cannot be resent.

> [!NOTE]
>
> MoleSignal does not email an invitation, and an invitation does not create an account or a
> membership. The person joins through [sign-up](https://docs.molesignal.com/en-US/console.md#sign-in) or
> [single sign-on](https://docs.molesignal.com/en-US/identity/sso.md), and an administrator sets the role under **Users**.

## Members API

| Operation | Endpoint | Permission |
| - | - | - |
| List users | `GET /api/v1/users` | `org.members.read` |
| Change a user | `PATCH /api/v1/users/{id}` | `org.members.manage` |
| Approve or reject | `POST /api/v1/users/{id}/approve`, `POST /api/v1/users/{id}/reject` | `org.members.manage` |
| Add or change a membership | `POST /api/v1/orgs/{id}/members` | `org.members.manage` |
| Remove a membership | `DELETE /api/v1/orgs/{id}/members/{user_id}` | `org.members.manage` |
| List or create invitations | `GET /api/v1/invitations`, `POST /api/v1/invitations` | `org.members.read`, `org.members.manage` |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.