Users and roles
From Settings → User Management: list people, switch Users/Roles tabs, and change someone’s organizational role on the edit page.
Outcome
You open User Management with the right permission, switch Users or Roles, edit via Edit (relation id), and see invites to Company team.
Who it's for
Team member with User Management permission (Roles tab needs view-roles)
Prerequisites
- Permission SETTINGS manage users (hub card: User Management)
- At least one company user to view in a test environment
- View-roles permission if you want the Roles tab
Steps
- From the Settings hub, open User Management. Back to Settings returns you to the hub. This page is for access control: who can sign in and what organizational role they hold. Inviting a brand-new teammate from scratch belongs on Company team / `md-team` (invites and team size).
- Two tabs: Users (default) and Roles. Roles appears only if you may view roles; without that permission you stay on Users. Bookmark or share the tab when you hand off work.
- On Users: scan the list (card or table view as the product offers). Use search when present. Edit opens Edit where id is the relation between user and company (not only the user number). Prefer the Edit control from the list so the id is correct. Deactivate removes access without deleting the person; you can reactivate later when the product offers it.
- On Edit User, pick the new organizational role from the dropdown. Labels often show the role type (in the app e.g. Resource = person). Save ends the current relation (valid_to = today) and starts a new one (valid_from = today) so history stays intact. You return to Users tab. If you change someone to a resource or client (in the app: Resource or Client) without a linked record, a safety dialog may appear: Create & Link Resource Now, Cancel, or Change Anyway (buttons in the app). Prefer create-and-link so they do not land on an empty portal.
- On Roles (when visible): create or edit roles and the permissions each role grants. Keep roles intentional: planners, admins, and field people see very different apps, and finance permissions can stay off for people who only need to plan. Deep permission matrices are per-role; this tutorial is the map, not every checkbox.
- Next in this cluster: appearance and localization. Continue from Company team already points here for settings depth after invites.