Open /members and click "Invite" to issue an invite for a teammate's email address with a chosen role (admin / contributor / viewer / auditor). Kodori emails the invitee a branded invite link automatically; the same link is also visible under "Pending invites" if you want to copy it into Slack or chat as a backup. Each pending row has "Resend email" and "Revoke" buttons.
Flow: 1. The invitee receives the invite email and clicks the link (or you share it manually). 2. They sign in with Google or Microsoft. On first sign-in, Kodori creates them in a "default" workspace. 3. They return to the invite page and click "Accept". 4. Their user record is moved into your workspace with the invited role. 5. They're signed out and prompted to sign in again — the next sign-in carries the new workspace on their session.
The audit log records the move via permission.granted with kind=invite-accepted, including the previousTenantId.
Roles: - **owner** — first user in a workspace; can grant any role to any member. - **admin** — can manage members, invites, retention, holds, encryption, anomalies, costs. - **contributor** — can upload, edit metadata, manage their own documents. - **viewer** — read-only on documents they're granted access to. - **auditor** — read-only on the audit log + governance pages.
Invites expire after 14 days. You can revoke unused invites from /members at any time.