Adding and removing people
Invitations, roles, and what happens when someone leaves.
Last updated September 22, 2026
People are added by invitation from the Team surface, and their role decides what they can see and change.
Inviting
Send an invitation to a work address and choose the role it carries. The invitation is time limited and single use. If it expires before it is accepted, send another; expired invitations are cleaned up rather than left lying around.
Choosing a role
Give people the narrowest role that lets them do their job. Contributors can do assessment work without being able to change the organization's configuration, and auditors can read without changing anything at all. See Roles and permissions.
Removing someone
Removing a member revokes their access immediately, including any session they currently have open. Their contribution history stays, because removing the person should not rewrite the record of what happened.
If single sign-on is required, removing them from your identity provider also stops them signing in, and doing both is the cleaner offboarding.