> ## Documentation Index
> Fetch the complete documentation index at: https://msprecapp.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Invite users and manage roles in MSP Recapp

> Invite team members, assign Admin or User roles, manage pending invitations, and disable or remove users from your MSP Recapp workspace.

MSP Recapp supports multiple users per workspace, each with a role that controls what they can see and do. You invite team members by email, and they receive an invitation link to accept before gaining access. The Users page shows all active members, pending invitations, and disabled accounts in separate tabs.

## Roles

Every workspace member is assigned one of two roles.

<CardGroup cols={2}>
  <Card title="Tenant Admin" icon="shield">
    * Manage integrations and API keys
    * Configure rules and webhooks
    * Invite and manage users
    * Access all reports
    * Modify workspace settings
  </Card>

  <Card title="User" icon="user">
    * View the dashboard and reports
    * Read-only access to integrations
    * Cannot modify settings
    * Cannot manage other users
  </Card>
</CardGroup>

<Note>
  The workspace owner is always a Tenant Admin. You cannot remove or downgrade the last Admin in a workspace.
</Note>

## Invite a user

<Steps>
  <Step title="Go to Users">
    Open the **Users** page from the main navigation.
  </Step>

  <Step title="Click Invite User">
    Click the **Invite User** button in the top-right corner of the page.
  </Step>

  <Step title="Enter email and role">
    Type the recipient's email address and select either **Admin** or **User** as their role in the invite dialog.
  </Step>

  <Step title="Send the invitation">
    Click **Send Invitation**. MSP Recapp sends the recipient an email with an invitation link. The invitation expires after a set period — the expiry date is shown in the Pending tab.
  </Step>

  <Step title="User accepts the invite">
    The invitee clicks the link in their email, creates or signs in to their account, and is added to your workspace with the assigned role.
  </Step>
</Steps>

## Manage pending invitations

Open the **Pending** tab to see all invitations that have been sent but not yet accepted. Each pending invite card shows the email address, assigned role, sent date, and expiry date.

From a pending invite card you can:

* **Resend** — Click the refresh icon to resend the invitation email.
* **Cancel** — Click the X icon to cancel the invitation before it is accepted.

<Note>
  If a user did not receive their invite email, check their spam folder first, then use the resend button on the Pending tab.
</Note>

## Change a user's role

Open the **Active** tab, find the user's card, and click the actions menu (three-dot icon). Select **Change Role** to switch between Admin and User. The change takes effect immediately.

## Disable a user

Disabling a user revokes their access without permanently removing them from the workspace. Open the actions menu on their card and select **Disable**. Disabled users appear in the **Disabled** tab and can be re-enabled at any time.

## Remove a user

To permanently remove a user from the workspace, open the actions menu on their card and select **Remove**. This action cannot be undone; if you need to restore access later, you will need to send a new invitation.

## MFA and user access

<Warning>
  If a Tenant Admin enables the **Require MFA for all users** toggle in Security settings, every user in the workspace must configure an authenticator app before they can log in. Users without MFA configured are prompted to set it up on their next login attempt.
</Warning>

For more information on MFA enforcement, see [Security settings and audit log](/account/security).