--- title: "Invite a user" description: "Invite someone to your MyAccount account by email, with a role, and see what they receive, how they accept, and how to resend or revoke the invitation." content_type: "how-to" product: "account" platform: "MyAccount" url: "/myaccount/account/how-to/invite-a-user/" topic: ["users-and-access"] --- # Invite a user Bring one or more people into your account by email, each with a role, so they work in it with their own sign-in instead of yours. Someone who is new to E2E creates their sign-in from the invitation; someone who already has a MyAccount login accepts it from their own account. ## Before you begin Check that: - You are an **Admin** or a **Project Lead**. Only these two roles see **Add User**; see [Add User is missing](/myaccount/account/troubleshooting/account/#add-user-is-missing). An **Admin** can invite someone with any role, and a **Project Lead** can invite only a **Project Lead** or a **Member**. To add an **Admin**, **Billing**, **Billing + Member**, or **Viewer**, ask an Admin. - Customer validation is approved for your account. Until then, **Add User** opens **Complete Your Account Setup** instead; see [Complete customer validation (KYC)](/myaccount/account/how-to/complete-customer-validation/). - For a **Member** or **Billing + Member**, each project you want to give them has a policy. See [Create a policy set](/myaccount/account/how-to/create-a-policy-set/). ## Send the invitation 1. Open **Identity & Access Management (IAM)** from the account menu, then **All Users**. 2. Click **Add User**. In **Email**, enter one or more email addresses. 3. Choose a **Role**. The list shows only the roles you can give: all six for an Admin, and **Project Lead** and **Member** for a Project Lead. For a **Member** or **Billing + Member**, also choose one or more **User Groups**, one or more projects each with a policy, or both; they need at least one of the two. A group gives the person every project and policy in it, and projects you pick here add to that. **Admin**, **Project Lead**, **Billing**, and **Viewer** get their access from the role itself, so MyAccount offers this choice only for the other two. See [Choose a role for a user](/myaccount/account/how-to/choose-a-role-for-a-user/) for what each role allows. 4. Once your account has an identity provider set up, **Add User** also shows an **Identity Provider** field. Keep **None** for an ordinary invitation, or choose a provider to invite the person through single sign-on instead. See [Set up single sign-on with Microsoft Entra ID](/myaccount/account/how-to/set-up-single-sign-on/). 5. Click **Add User**. MyAccount shows **User invitation email has been sent successfully.**, or **SSO user invitation email has been sent successfully.** when you chose an identity provider. When you invite several addresses at once, a box lists which invitations went out and which failed, with the reason next to each failure, so you can resend only the ones that failed. To change the role or projects of someone already on your account, use **Edit**. Inviting them again is refused with **Already an iam user. Please use the edit functionality to change the access behaviour**. An address with a pending owner email change is refused too, with **A pending email change request already exists for same email.** ## What the invitee receives and how they accept What happens next depends on whether the invited email already has a MyAccount login. - Someone new to E2E gets a link to **Account Activation**, where they set their name, a mobile number with a code, and a password, then click **Register**. They work under your account's customer validation and have no validation of their own to complete. - Someone who already has a MyAccount login gets an email and accepts it from their own **Manage Invitations** page. That page lists every pending invitation with the inviter's **Organization**, the **Role** offered, and **Accept** or **Decline**. They complete their own customer validation first; until then, accepting is refused with **Please complete KYC validation first, then accept the invitation**. Once they have validated, they accept from **Manage Invitations** again. ## Resend or revoke an invitation On **All Users**, an invitation still waiting, neither **Accepted** nor **Expired**, offers **Resend**; once it shows **Expired**, it offers **Re-invite** instead. An invitation shows **Expired** after a wait, and also as soon as the invited email signs up for a separate E2E account of its own or signs in there with Google or GitHub. **Re-invite** always issues a fresh link, whatever caused the expiry. **Re-invite** sends a new invitation, so its role must be one you can give. A **Project Lead** who re-invites an expired invitation for an **Admin**, **Billing**, **Billing + Member**, or **Viewer** is refused, with a message naming the role; ask an Admin to re-invite that person. Sending a second invitation to the same email while one is still waiting is refused with **User invitation already sent.** **Delete** on a pending or accepted invitation asks you to confirm, naming the person, and warns that deleting also removes them from TIR if they have access there. Someone who registered only to join your account loses that sign-in entirely; someone who already had their own MyAccount login keeps it and loses access only to your account. A **Project Lead** sees **Delete** only on a **Project Lead** or **Member** invitation, and on any invitation that has expired. ## See the invitation on All Users The person you invited appears on **All Users**, with their invitation marked **Invited** until they accept it. Once they accept, the person works in your account with the role and projects you chose. To change either later, see [Manage users](/myaccount/account/how-to/manage-users/). If they cannot accept, see [I cannot accept the invitation](/myaccount/account/troubleshooting/account/#i-cannot-accept-the-invitation).