---
title: "Get started with TIR Access Control"
description: "Invite a user to your TIR account and give them a role in a project."
content_type: "get-started"
product: "tir-iam"
platform: "TIR"
url: "/tir/tir-iam/get-started/"
---

# Get started with TIR Access Control

Invite a teammate to your TIR account and give them a project to work in. They get an email, accept the
invitation, and start working in the project.

## Before you begin

- The Owner, Admin, Project Manager, or Project Lead role. Each role can invite people to the roles below
  its own.
- The person's email address.
- The project they will work in. To make one, see [Create a project](/tir/projects/how-to/create-a-project/).

## Choose their role

Pick the smallest role that lets the person do their work. You can change it later.

- **PROJECT LEAD** for someone who runs the project day to day and adds Members to it.
- **PROJECT MANAGER** for someone who also creates projects of their own.
- **MEMBER** for someone who uses some of the project's services. A Member needs a policy that lists
  those services, so check that the project has one, or
  [create a policy](/tir/tir-iam/how-to/manage-project-members-and-policies/#create-a-policy) first.
- **ADMIN**, an account role rather than a project role, for someone who runs every project with you.

## Invite them

1. Open the account menu at the top right, the button that shows your name and email, and select
   **Identity & Access Management (IAM)**. On **Active users**, select **Add user**.
2. In **User email**, enter the person's email address.
3. Under **Account role**, choose **USER**, or **ADMIN** for someone who needs every project. An Admin
   reaches every project, so the form skips the project choice.
4. Under **Projects**, tick the project and choose the person's role in it under **Project role**. For
   **MEMBER**, choose one or more policies under **Project policies**.
5. Select **Add user**.

The person is listed under **Invited users** as **Pending**, and an invitation email goes to them.

## Check that they joined

A person who is new to E2E registers from the link in the email. A person who already has an account
finds the invitation under **Show my invitations** in the account menu and selects **Accept**.

Once they accept, they move to the **Active users** tab. A person who also has an account of their own
switches to yours under **Switch account** in the account menu, and your **Projects** list opens with the project in it.

## What to do next

- Compare what each role can do in [Roles and permissions](/tir/tir-iam/concepts/roles-and-permissions/).
- Add more people to the same project, or adjust a Member's policy, in
  [Manage project members and policies](/tir/tir-iam/how-to/manage-project-members-and-policies/).
- If your teammate sees **Access Restricted** or cannot find the invitation, see
  [Troubleshooting TIR Access Control](/tir/tir-iam/troubleshooting/tir-iam/).