User Management
Invite people with their first and last names, choose the apps they can open, change their role and status, and edit their name.
Settings › User Management is where organisation admins manage the people in their organisation, and in the child organisations below it.
For organisation admins
User Management is in the Settings menu for organisation admins only. Anyone else who opens it sees Team management is restricted.

Invite a user
Open the form
Choose Invite user (top right). The person will receive a secure invitation to access Onyx applications and workspaces.
Fill it in
| Field | |
|---|---|
| Target Organization | Your organisation or one of its child organisations (shows when you manage more than one) |
| Work Email | The address the invitation goes to |
| Organization Role | Organization User or Organization Admin |
| First Name, Last Name | The person's name. Onyx keeps it, so it shows everywhere once they accept |
| App access | The hubs they can open. They can open these as soon as they accept. Select all or Deselect all |
| Invitation expires | 2 days, 7 days, 14 days or 30 days. The person must accept before it expires. The default is 7 days. |

Send it
Choose Send invitation. You'll see Invitation sent: the person can now join the organisation. They follow Accept your invitation.
The people table
Users lists everyone in your organisation (and the organisations below it), with pending invitations among them:
| Column | |
|---|---|
| Person | Name and email. An invited person shows when they were invited and when it expires |
| Organization | Which organisation they belong to (when you manage more than one) |
| Role | Organization Admin or Organization User |
| Status | Active, Pending, Expired, Suspended or Removed |
| App access | The hubs they can open. An invited person shows After they accept |
Search with Search name or email, and filter by organisation, Organization type, role, status and app access (Has Deal Hub, No Hub access and so on). Clear filters resets them.
Act on someone
Each row's ⋯ menu has:
| For | Items |
|---|---|
| A member | Manage access, make them Organization Admin or Organization User, Suspend or Reactivate, Remove from organization |
| An invitation | Resend invitation, Revoke invitation |
Every change asks you to confirm first, for example Suspend ...? They lose access until reactivated. Then choose Confirm change. You'll see Team assignment updated, User removed, Invitation resent or Invitation revoked.
A person's details
Manage access opens the person's details:
- Name: change their First name and Last name and choose Save name. You'll see Name saved.
- Profile: their Role, Status, when they First signed in and User since.
- App access: turn each hub on or off. You'll see The user is now assigned this application or The user is no longer assigned this application.
- Actions: change their role, suspend or reactivate them, or remove them.

About app access:
- Administrators get every standard hub automatically: Included with administrator role (the switch is locked).
- A hub in a controlled rollout shows Selected for restricted rollout or Not selected for restricted rollout.
- App access can't be changed while a person's account or membership isn't active.
When someone can't open a hub
There are no access requests. A person who can't open a hub sees Ask your administrator for access on its card. Give them the hub under App access in their details.