Members and invitations
Who can invite people, change roles and remove members, what each action does, and where to do it in the web app, the command line and the API.
People join an organization by invitation. This page explains how invitations and membership work and who may do what. The screens are in Members, and what the invited person sees is in Accept an invitation.
Who can do what
| To | You need | Held by |
|---|---|---|
| See members | View members (member:read) | Every role |
| Invite, resend, revoke and list invitations | Invite members (member:invite) | Owners and admins |
| Change a member's role | Change member roles (member:change-role) | Owners and admins |
| Remove a member | Remove members (member:remove) | Owners and admins |
| Deactivate a member | Deactivate members (member:deactivate) | Owners |
An admin cannot invite someone as an owner, promote anyone to owner, or change or remove an owner: those are for owners. See Roles.
Invitations
An invitation names an email address and a role. Nuvelics emails the person a link, and opening it adds them to the organization with that role.
- An invitation expires seven days after it is sent. Resending it sends a fresh email and sets the expiry seven days from then. A resend within a minute of the last send is refused.
- Revoking an invitation means it can no longer be accepted. It does not affect anyone who is already a member.
- The invited person must sign in with the address the invitation names. An invitation opened while signed in as a different address is refused. See Signing in.
Changing a role
A new role applies from the member's next request. An organization must always keep at least one owner, so changing the last owner's role is refused.
Removing and deactivating
Removing a member ends their membership of this organization immediately. It does not delete their account, so they keep access to any other organization they belong to. The last owner cannot be removed.
Deactivating is stronger: it anonymizes the person's account, so their personal details are erased and they can no longer sign in, and it removes their membership. Because that affects every organization, it is refused for anyone who belongs to another organization (remove them instead), for yourself, and for the last owner. The person disappears from the member list. The web app does not offer the action; use the API.
Where to do it
| Task | Web app | Command line | API |
|---|---|---|---|
| List members | Members tab | nuvelics member list | GET /api/tenant/v1/members |
| Invite, list, resend, revoke | Pending invitations | nuvelics invitation invite, list, resend, revoke | /api/tenant/v1/members/invitations |
| Accept an invitation | The emailed link | nuvelics invitation accept | POST /api/tenant/v1/members/invitations/accept |
| Change a role | Change role | not available | PATCH /api/tenant/v1/members/{userId} |
| Remove a member | Remove | not available | DELETE /api/tenant/v1/members/{userId} |
| Deactivate a member | not available | not available | POST /api/tenant/v1/members/{userId}/deactivate |
The command-line reference is nuvelics member and
nuvelics invitation. The API reference is
Members.