Invite your team
Add colleagues, choose their roles and give external auditors scoped, read-only access.
Updated 2026-10-21
Invite people
- Go to Settings > Team and choose Invite.
- Enter one or more email addresses, separated by commas.
- Pick a role and, optionally, a user type.
- Send. Invitees get an email with a link to join; pending invites show in the team list until accepted.
Roles
| Role | What they can do |
|---|---|
| Owner | Everything, including billing and deleting the workspace. |
| Admin | Manage people, integrations, programs and settings. |
| Member | Work on the controls, evidence, tasks and policies assigned to them. |
| Viewer | Read-only access across the workspace. |
| Client auditor | Read-only access to the specific programs you share with them. |
Your user type (for example employee, consultant or auditor) is separate from your role, so a consultant can hold an admin role without being mistaken for staff in reports.
Who should get which role
- Owners: one or two people accountable for the workspace, typically the CISO or compliance lead plus a backup.
- Admins: whoever sets up integrations and manages programs.
- Members: control owners across engineering, IT, HR and legal.
- Viewers: executives and board members who want dashboards.
Look at the controls in my programs and tell me which departments own them. Draft a list of who I should invite, with a suggested role for each.
Bring in an external auditor
- Invite the auditor with the Client auditor role.
- Choose the programs they should see.
- They get read access to controls, evidence and reports for those programs only, and every view is logged.
Before inviting, check that evidence is current and not-applicable decisions have justifications.
Prepare my <program name> program for auditor access: list any controls with stale evidence, missing narratives or not-applicable decisions without a justification.
Remove someone
Remove a person from Settings > Team. Their past work, approvals and audit trail entries stay in place and stay attributed to them. Reassign their open controls and tasks first:
List every control, task and policy owned by <person's name> so I can reassign them before they leave.
Troubleshooting
The invite email never arrived
Check spam and any email security quarantine. Resend from the pending invite in Settings > Team.
The invitee sees an empty workspace
Members only see items assigned to them. Assign controls or tasks, or give them the Viewer role for read access.