People and access
Invite people, change roles, approve requests, let people in with the company email and remove someone without losing their work.
Privacy and analytics
We use necessary technical cookies and, only with your consent, analytics and marketing pixels to improve the website and measure campaigns.
Invite people, change roles, approve requests, let people in with the company email and remove someone without losing their work.
Updated on October 24, 2026
The owner and the organization's admins manage it. A brand admin manages their brand's team.
Their organization role, their brand access ("All brands", a few or none), since when they are in and whether they are online now. What can they do? opens their card: what they can and cannot do in each brand, in plain words, without permission names. What each role gives is in Organization and brand roles.
Only the owner invites as Admin. A brand admin invites to their brand as Editor, Viewer or Billing. Under Invitations you see the pending ones and can resend them (the link lasts the same length again from then), copy the link or revoke them. One day before it expires, the invited person gets a reminder.
Open the person and change their organization role or their brands. Before saving you see what they gain and what they lose, and you can note the reason. The person gets a notice with the change.
For several at once, select them in the list (up to 100): you can change their role or their brand access, remove them or Export CSV (name, email, status, roles, access, since when and who invited them). Whoever you cannot change is left out with the reason: the owner and, if you are an admin, the other admins.
When someone opens a brand they do not reach, they see You need access and can ask for it; people in the organization can also ask from its page. Requests arrive under Requests (and on the brand's team page, for its admins), pending first.
The owner can add up to 5 domains, for example yourcompany.com. Each must be the domain of one of their confirmed emails; public email providers (such as gmail.com) do not qualify. For each domain choose:
Anyone with a confirmed email at that domain sees a notice under Workspaces with the organizations they can join. Someone who was removed before cannot come back on their own: their attempt becomes a request. If the owner's email behind a domain goes away, the domain shows "Not verified" and lets nobody in.
Before removing a person you see what they hold in the organization (or in that brand): their open tasks, the works they approve, the invitations they sent and the connections they authorized, with the authorization that takes over or a note that it will need reconnecting. If you choose someone else, you hand it all over in the same step:
A connection cannot pass from one person to another: the authorisation belongs to whoever leaves. If no other authorisation keeps it working, you choose who connects it again among the people who manage that brand's connections. That person gets a notice ("To do: connect Instagram for Acme again") and sees it in the brand's Connections, with a button to connect that network. It goes away by itself as soon as they connect it again; they can also dismiss it.
Full details in Leave, close or delete.
The History tab tells who invited, changed or removed access, approved or declined requests and opened the organization to a domain, when and why. The owner and the admins see it.
We let you know when your role or your brand access changes, when your access is removed, when you receive or hand over ownership, when you receive the work of someone who leaves or are asked to connect one of their connections again (as soon as the handover is done) and when someone declines one of your invitations. We never notify you of your own changes. Choose how in Notifications, group "Team".