Invite a user

Bring one or more people into your account by email, each with a role, so they work in it with their own sign-in instead of yours. Someone who is new to E2E creates their sign-in from the invitation; someone who already has a MyAccount login accepts it from their own account.

Before you begin

Check that:

• You are an Admin or a Project Lead. Only these two roles see Add User; see Add User is missing. An Admin can invite someone with any role, and a Project Lead can invite only a Project Lead or a Member. To add an Admin, Billing, Billing + Member, or Viewer, ask an Admin.
• Customer validation is approved for your account. Until then, Add User opens Complete Your Account Setup instead; see Complete customer validation (KYC).
• For a Member or Billing + Member, each project you want to give them has a policy. See Create a policy set.

Send the invitation

1. Open Identity & Access Management (IAM) from the account menu, then All Users.
2. Click Add User. In Email, enter one or more email addresses.
3. Choose a Role. The list shows only the roles you can give: all six for an Admin, and Project Lead and Member for a Project Lead. For a Member or Billing + Member, also choose one or more User Groups, one or more projects each with a policy, or both; they need at least one of the two. A group gives the person every project and policy in it, and projects you pick here add to that. Admin, Project Lead, Billing, and Viewer get their access from the role itself, so MyAccount offers this choice only for the other two. See Choose a role for a user for what each role allows.
4. Once your account has an identity provider set up, Add User also shows an Identity Provider field. Keep None for an ordinary invitation, or choose a provider to invite the person through single sign-on instead. See Set up single sign-on with Microsoft Entra ID.
5. Click Add User. MyAccount shows User invitation email has been sent successfully., or SSO user invitation email has been sent successfully. when you chose an identity provider.

When you invite several addresses at once, a box lists which invitations went out and which failed, with the reason next to each failure, so you can resend only the ones that failed.

To change the role or projects of someone already on your account, use Edit. Inviting them again is refused with Already an iam user. Please use the edit functionality to change the access behaviour. An address with a pending owner email change is refused too, with A pending email change request already exists for same email.

What the invitee receives and how they accept

What happens next depends on whether the invited email already has a MyAccount login.

• Someone new to E2E gets a link to Account Activation, where they set their name, a mobile number with a code, and a password, then click Register. They work under your account’s customer validation and have no validation of their own to complete.
• Someone who already has a MyAccount login gets an email and accepts it from their own Manage Invitations page. That page lists every pending invitation with the inviter’s Organization, the Role offered, and Accept or Decline. They complete their own customer validation first; until then, accepting is refused with Please complete KYC validation first, then accept the invitation. Once they have validated, they accept from Manage Invitations again.

Resend or revoke an invitation

On All Users, an invitation still waiting, neither Accepted nor Expired, offers Resend; once it shows Expired, it offers Re-invite instead. An invitation shows Expired after a wait, and also as soon as the invited email signs up for a separate E2E account of its own or signs in there with Google or GitHub. Re-invite always issues a fresh link, whatever caused the expiry.

Re-invite sends a new invitation, so its role must be one you can give. A Project Lead who re-invites an expired invitation for an Admin, Billing, Billing + Member, or Viewer is refused, with a message naming the role; ask an Admin to re-invite that person.

Sending a second invitation to the same email while one is still waiting is refused with User invitation already sent.

Delete on a pending or accepted invitation asks you to confirm, naming the person, and warns that deleting also removes them from TIR if they have access there. Someone who registered only to join your account loses that sign-in entirely; someone who already had their own MyAccount login keeps it and loses access only to your account. A Project Lead sees Delete only on a Project Lead or Member invitation, and on any invitation that has expired.

See the invitation on All Users

The person you invited appears on All Users, with their invitation marked Invited until they accept it.

Once they accept, the person works in your account with the role and projects you chose. To change either later, see Manage users. If they cannot accept, see I cannot accept the invitation.