# Invite your team and assign roles

Start by inviting people at the right level, then adjust access if needed.

Use **organization access** when someone should help manage the organization or work across several workspaces. Use **workspace access** when someone only needs access inside a workspace.

In most cases, the default role is the best place to start. Add custom roles later if you need more specific permissions inside an app.

## **Organization level invitations**

Invite users at organization level when they should be part of the organization and need an organization role.

{% stepper %}
{% step %}

#### Open Settings

Click the **gear icon** <i class="fa-gear">:gear:</i> in the main navigation to open **Settings**.
{% endstep %}

{% step %}

#### Open Users & roles

In the **Organization** section, select **Users & roles**.
{% endstep %}

{% step %}

#### Start the invitation

On the Organization users & roles screen click **+ Invite users**.
{% endstep %}

{% step %}

#### Enter the email address

Enter the email address of the person you want to invite.
{% endstep %}

{% step %}

#### Select the organization role

Choose the organization **Role**:

* **Admin**: Full access to the organization.
* **Admin W/O Billing**: Manages users, roles, settings, and workspaces, but not billing.
* **Billing**: Manages subscriptions and payments.
* **Member**: Regular organization member with access to workspaces.
  {% endstep %}

{% step %}

#### Select the email language

Select the language for the invitation email.
{% endstep %}

{% step %}

#### Send the invitation

Click **Invite**.
{% endstep %}
{% endstepper %}

The invited user receives an email with instructions to join the organization.

This is usually the best option for people who work across several workspaces or help manage the organization itself.

For advanced setup, see [Manage organization access](https://ninox-1.gitbook.io/ninox-docs/OE5eDeSCv1tCbV8e0YOj/builder-hub/manage-your-organization-and-workspace/organization/manage-organization-access) in the Builder Hub.

The **Organization users & roles** screen gives you a clear overview of users in the current organization.

<figure><img src="/files/JKVsalq5NPBgvtjni72A" alt=""><figcaption></figcaption></figure>

On this screen, you can:

* Use **Search by email…** to find a specific user quickly.
* Use **Filter by status** to narrow the list by invitation or account status.
* Click **+ Invite users** to add new organization users.
* Select users with the checkboxes in the list for bulk actions.
* Change a user’s organization role directly in the **Role** column.
* See which workspaces a user belongs to in the **Workspaces** column.
* See when a user joined or when the invitation was sent in **Joined/invited**.
* See whether the email address is confirmed in **Verified**.
* See the current access state in **Status**, for example **Active**.
* Manage [custom roles](#custom-roles)

## **Workspace level invitations**

Invite users at workspace level when they only need access to one workspace.

{% stepper %}
{% step %}

#### Open Settings

Click the **gear icon** <i class="fa-gear">:gear:</i> in the main navigation to open **Settings**.
{% endstep %}

{% step %}

#### Open Workspace users

In the **Workspace** section, select **Users & roles**.
{% endstep %}

{% step %}

#### Start the invitation

Click **+ Invite users**.
{% endstep %}

{% step %}

#### Enter the email address

Enter the email address of the person you want to invite.
{% endstep %}

{% step %}

#### Select the workspace role

Choose the workspace **Role**:

* **Admin**: Full access to the workspace.
* **Editor**: Works in the workspace and its apps.
* **Viewer**: Can read and export data, but cannot change it.
* **None**: No default workspace role. Use this when access should come only from custom roles.
  {% endstep %}

{% step %}

#### Select the email language

Select the language for the invitation email.
{% endstep %}

{% step %}

#### Send the invitation

Click **Invite users**.
{% endstep %}
{% endstepper %}

The invited user receives an email with instructions to join the workspace.

This is a good option when access should stay limited to one team, one solution, or one area of work.

{% hint style="info" %}
If the invited user is not already part of the organization, inviting them to the workspace also adds them to the organization as a **Member**.
{% endhint %}

For advanced setup, see [Manage workspace access](https://ninox-1.gitbook.io/ninox-docs/OE5eDeSCv1tCbV8e0YOj/builder-hub/manage-your-organization-and-workspace/workspace/manage-workspace-access) in the Builder Hub.

The **Workspace users & roles** screen helps you manage access for the current workspace only.

On this screen, you can:

* Invite users to the workspace.
* Change a user’s workspace role directly in the **Role** column.
* Use **Search by email…** to find specific members.
* Use **Filter by status** to check invitation and account status.
* See when a user joined or when the invitation was sent in **Joined/invited**.
* See whether the email address is confirmed in **Verified**.
* See the current access state in **Status**, such as **Active**, **Inactive**, or pending.

{% hint style="info" %}
If you are in table view or on **Workspace home**, you can click **Invite users** <i class="fa-user-plus">:user-plus:</i> in the app navigation for a faster workspace invitation flow.
{% endhint %}

## **Custom roles**

Organization roles and workspace roles control access at a broad level. Custom roles give you more detail when the default role is too broad.

You create custom roles at organization level and reuse them across workspaces in the same organization. You then assign them in a workspace and use them in permissions.

In **Builder mode**, you can use them for:

* table permissions
* field permissions
* app permissions

To limit app access to specific user roles:

* In the app, open <i class="fa-gear">:gear:</i> **App settings** from the app navigation.
* In **Allow access to**, select the roles that should have access.

For a getting-started setup, keep things simple:

* Add users to the right organization or workspace first.
* Use custom roles later when your app needs more specific access rules.

For more detail on advanced permissions, continue in the Builder Hub:

* [Manage organization access](https://ninox-1.gitbook.io/ninox-docs/OE5eDeSCv1tCbV8e0YOj/builder-hub/manage-your-organization-and-workspace/organization/manage-organization-access)
* [Manage workspace access](https://ninox-1.gitbook.io/ninox-docs/OE5eDeSCv1tCbV8e0YOj/builder-hub/manage-your-organization-and-workspace/workspace/manage-workspace-access)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ninox.com/getting-started/builder-getting-started/set-up-your-ninox-manually/invite-your-team-and-assign-roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.