Team page structure
/settings/team contains two core tables:
- Active members
- Pending invitations
Roles
owner: full management authorityadmin: operational management authoritymember: usage-focused access
Permission matrix (summary)
- Invite member: owner, admin
- Cancel invitation: owner, admin
- Change role: owner
- Remove member: role-restricted owner/admin actions
Invitation flow
- Open
Invite Member - Enter email and role
- Send invitation
- Track status in pending invitations
Invite acceptance
Invited users accept from tokenized invitation page. Upon acceptance, membership is activated in that tenant.Role updates
Owner can change role for eligible members directly in table controls.Member removal
Eligible users can remove members through row actions.Team governance recommendations
- Maintain at least two owner/admin users per tenant
- Clean stale invitations weekly
- Remove former team members on the same day