Workspace, teams, and users
Manage who has access to your workspace, how they are organized into teams, and what they can do.
Audience: IT (the enabler)
The /users page is the single admin surface for membership. It opens on the Workspace users tab and includes a Teams tab next to it. Both tabs are admin-only today: members who navigate to /users land on a hard-block page that lists the workspace owners and admins to contact.
Read the workspace users tab
The Workspace users tab is a flat directory of everyone in the workspace. Four stat tiles at the top double as role filters: Total, Owners, Admins, and Members. Click a tile to scope the list to that role. The toolbar below adds a search field, a team filter, and a status filter.
Each row shows the avatar, display name, email, role badge (Owner, Admin, Member), the team chips the person belongs to, and last sign-in time. The kebab on each row opens admin actions: change role, add to team, view activity, and remove.
Invite a teammate
The invite flow mints a one-time accept link. The link expires in fourteen days and is only returned at create time and on resend.
Open the invite dialog
Click Invite in the page header.
Enter the email and pick a role
Workspace role is Member or Admin. Owner is intentionally not offered here.
Copy the accept link and share it
The success toast surfaces the link. Send it through the channel your org uses for onboarding.
Owner promotion is API-only. The dialog only offers Member and Admin. Existing owners grant the Owner role through the API. This keeps the most privileged role off a one-click surface.
Pending invites appear in the directory with a dashed Sema4 avatar and a Pending chip. The row actions are Copy link, Resend, and Revoke. Copy link reads the cached token when present and falls back to a fresh resend if it does not. Resend mints a new token and invalidates the previous one.
Manage roles and remove people
Click the kebab on a user row and pick Change role to switch between Member and Admin. You cannot change your own role from this page and you cannot demote an owner.
Remove soft-removes the user: access ends immediately, the user record stays so audit history still resolves them by name, and you can re-invite the same email later. Owners can also Permanently erase a user. That action requires typing the user's email to confirm and is irreversible. Audit history still references the user by id after erase, but the identity record is gone.
Organize teams
Switch to the Teams tab to create teams and manage membership. Teams are a two-pane layout: a searchable rail on the left, a detail pane on the right. Below 1080px the panes stack vertically.
Create a team
Click Create team. Set a name, an optional slug, a description, and an icon.
Add members
Open the team in the right pane and click Add member. Pick an existing workspace user and assign them as a Team Admin or a Member.
Archive or delete
Use the kebab in the team header to archive a team. A team must be archived and have no bound projects before it can be permanently deleted. The delete dialog lists any bound projects you need to move or remove first.
Trace what a user did
Click View activity on a row to deep-link into the audit ledger with that user pre-selected as the actor. The link uses /audit?actor=<user_id>, which is a server-side filter. Pagination respects the filter, so the timeline you see is complete for that actor and time window.
Read-only directory for non-admins is not in v3. Members who navigate to /users see a hard-block page with the owners and admins to contact. A directory view that members can browse without admin tools is on the roadmap.