Skip to content

Members and invitations

Invite people, change roles, and remove access.

Invite by email address and choose a role. The invitation is a row rather than a signed token, because an invitation must be single use and revocable, and a signed token can be neither.

An unaccepted invitation counts against your seat limit. See Limits.

Both invitation.create and invitation.revoke are recorded in the audit log.

An invited person arrives somewhere that already knows who they are: the workspace, the project, and the role they were given. They do not land on a generic sign-up page and then have to find you.

Change it on the People screen. The change is immediate and recorded.

The last owner cannot be demoted. Transfer ownership first.

Removal deletes a membership, not a user.

Their account survives, their name stays on the pages they wrote, and their history stays in the revision log. Deleting an ex-colleague’s documentation is the opposite of what a documentation product is for.

Removal takes effect at once, across every project.

Note

Being removed is a sentence, not an outage. Somebody removed mid-session is told what happened rather than shown a broken screen.

Your plan sets how many people may be in the workspace, counting invitations nobody has accepted yet.

The number bounds adding and never removing:

  • a workspace already over a new limit keeps everybody in it;
  • it simply cannot add one more;
  • a downgrade never locks colleagues out.

A downgrade that locked people out would be exactly the immediate deletion the product refuses, applied to a team instead of to pages.

Where single sign-on is configured, somebody signing in through your directory for the first time gets a membership.

Warning

Single sign-on never removes anybody. Removing a person from your directory shuts the door — they cannot sign in through it again — but the membership row stays, they still appear in People, and they still count against your seats.

Remove them in People as well. Automatic deprovisioning is SCIM, and SCIM is not built.

Deleting your personal account never deletes a workspace’s content. A workspace survives its members.