Invite and manage users

Create / invite one user

1. Open Users → Add User / New.

2. Enter email (required), optional name/username.

3. Choose role(s) (defaults to the seeded "user" role if you pick none).

4. Optionally assign a user group.

5. Password:

   • Leave empty → user stays inactive until they finish activation; email with link to /auth/activate?token=… (token typically ~24 hours).

   • Set a password → user becomes active immediately and may get a welcome email.

6. Save. Watch plan seat usage if you are near the Free/Starter limit.

Mass create

/users/new includes a mass create path: paste a list of emails, shared roles/group. Respects remaining plan slots and may rate-limit between creates. Prefer it for onboarding a whole floor at once, then have each person activate if no shared password was set.

Activation & resend

Inactive users cannot sign in.

Edit

/users/[id]/edit (needs permission to edit users): identity, roles, password, group-related fields as offered on the form.

Detail page /users/[id]: summary plus Activate / Deactivate / Resend.

Deactivate vs delete

Delete rules (shop staff)

• You cannot delete yourself.

• Shop admins cannot delete admin users.

• You cannot remove the last admin (delete or strip admin role) — keep at least one admin for the shop.

• Platform root has broader powers (including deleting tenant admins / last admin with cascade that may remove an orphan shop from /platform/tenants).

Checklist — first team after setup

• Confirm seats on /billing

• Keep your admin account protected

• Invite manager / ops with correct roles (activation email if no password)

• Confirm they can sign in and open /profile

• Optional groups at /user-groups

• Review Team permissions if orders are in use

• Upgrade at /pricing when you hit the user limit