Admin panel → Team — invite users, manage roles and spaces.

The search field above the list finds people by first name, last name and email; words can be typed in any order (“Smith Anna” finds “Anna Smith”). A long list scrolls, and search works the same on a phone.

#Inviting users

  1. Click "Invite"
  2. Enter your colleague's email
  3. Choose an organization role: Admin / Editor / User / Guest (the role determines the access level)
  4. In the "Space access" block, select spaces and set a role in each (Admin / Editor / Viewer; Viewer only for a guest). Without selecting any spaces, the person only gets access to corporate spaces (a guest — to none)
  5. Click "Send invitation"

An invitation is valid for 7 days. After accepting, the user creates a password (8 to 64 characters: an uppercase and a lowercase letter, a digit and one of @ # $ % & * - _ !) and gains access to the selected spaces. If the invitee doesn't have an account yet, the invitation appears in their notifications right after they register with the same email.

#Roles

Owner Admin Editor User Guest
  • Owner — one per organization. Can do everything, in all spaces; only the owner pays for and changes the plan, deletes the organization and transfers ownership. The owner cannot be suspended or deleted.
  • Admin — runs the team, spaces, integrations and settings. Does not manage the plan and billing.
  • Editor — writes and edits articles where they have the Editor or Admin space role; in corporate spaces they get the Editor role automatically.
  • User — searches and reads.
  • Guest — guest access for external participants: search and reading in the granted spaces, their own bookmarks and notifications. The admin panel is not available to them.

These are the default permissions. The full “permission × role” table, what is fixed, and how to customize permissions for your organization (Settings → Manage permissions; permissions can be changed on a plan where this feature is enabled) — in the Roles and access rights article.

You can edit within a specific space even with a basic organization role — if you've been granted the Editor/Admin role for that space. Not for a Guest: in a space they are only a Viewer. See details in Roles and access rights.

#Managing members

#Members table

For each member the following is shown:

  • Email and name (for yourself — a "This is you" label)
  • Organization role — changed by clicking the pill (Admin / Editor / User / Guest); the owner has an "Owner" badge
  • Status — Active / Suspended
  • Last login

#Actions

  • Change role — click the pill of the desired role
  • Spaces — manage space access and the role in each (see below)
  • Reset password — the member receives an email with a reset link; the link is valid for 30 minutes, and the member sets the new password themselves. The password is not sent by email
  • Suspend / Activate — temporarily close access and restore it (data is preserved)
  • Delete — remove from the organization (with confirmation)

Restrictions. You cannot change/suspend/delete yourself, the Owner, or members of an equal or higher level than yours. For the owner's row, only the "Spaces" button is available.

#User's spaces

The "Spaces" button opens a member's space access:

  • A list of the spaces where they are a member, and their role in each — Admin / Editor / Viewer
  • Add to space — from the "Add to space" block
  • Change role in a space or remove them from it (the cross)
  • A space with no other members is an ordinary private space: access is granted and revoked the same way
  • The organization Owner has the "Owner" role in all spaces (full access, not changeable)

The role in a space can differ from the organization role — see details in Roles and access rights.

#SSO (Single Sign-On)

For the Business and Enterprise plans: set up corporate authentication via OIDC in Settings → Security. Once SSO is enabled, users sign in through their corporate account (Google, Azure AD, Okta, Keycloak).

#Security

  1. Login by email + password (or SSO)
  2. JWT tokens with automatic refresh
  3. All actions are logged in the audit trail
  4. Suspended users cannot log in
  5. Each organization's data is isolated from others