> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codethreat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Inviting Team Members

> Add team members to your CodeThreat organization

Collaborate on security by inviting team members to your CodeThreat organization.

## Invite Team Members

<Steps>
  <Step title="Navigate to Team Settings">
    Go to **Organization Settings** → **Members**
  </Step>

  <Step title="Click Invite Member">
    Click **Invite Member** button
  </Step>

  <Step title="Enter Email Addresses">
    Add one or more email addresses (one per line or comma-separated)
  </Step>

  <Step title="Assign Role">
    Select role for invited members:

    * **ADMIN**: Full administrative access
    * **USER**: Standard member access (view-only for most features)
    * **Custom roles**: If your organization has created custom roles
  </Step>

  <Step title="Set Repository Access (Optional)">
    Choose repository access:

    * **All repositories**: Access to all current and future repos
    * **Selected repositories**: Choose specific repos
  </Step>

  <Step title="Send Invitations">
    Click **Send Invitations**

    Email invitations are sent immediately
  </Step>
</Steps>

## Invitation Process

### What Invited Users Receive

Email invitation with:

* Organization name
* Role assigned
* Invitation link (valid for 7 days)
* Instructions to accept

### Accepting Invitations

<Steps>
  <Step title="User Clicks Link">
    Invited user clicks invitation link in email
  </Step>

  <Step title="Sign Up or Sign In">
    If existing user: Sign in
    If new user: Create account
  </Step>

  <Step title="Accept Invitation">
    Review organization details and click **Accept**
  </Step>

  <Step title="Access Granted">
    User is added to organization with assigned role
  </Step>
</Steps>

## Managing Pending Invitations

### View Pending Invitations

**Organization Settings** → **Members** → **Pending Invitations** tab

Shows:

* Invited email
* Role
* Sent date
* Expiration date

### Resend Invitation

If user didn't receive invitation:

1. Find pending invitation
2. Click **Resend**
3. New invitation email sent

### Cancel Invitation

To revoke an invitation:

1. Find pending invitation
2. Click **Cancel**
3. Invitation link becomes invalid

<Note>
  Invitations expire after 7 days. Expired invitations must be resent.
</Note>

## Bulk Invitations

Invite multiple team members at once:

```
# Enter multiple emails:
alice@company.com
bob@company.com
charlie@company.com
```

Or comma-separated:

```
alice@company.com, bob@company.com, charlie@company.com
```

All invited users receive the same role and repository access.

## Best Practices

**Assign appropriate roles**: Use principle of least privilege

**Set repository access**: Limit access to relevant repositories

**Use USER role for stakeholders**: Non-technical stakeholders typically need read-only access

**Invite via work emails**: Use company email addresses, not personal

**Review pending invitations**: Cancel expired or incorrect invitations

**Welcome new members**: Brief them on security practices and tools

## What's Next?

<CardGroup cols={2}>
  <Card title="Roles and Permissions" icon="user-shield" href="/team/roles-and-permissions">
    Understand role capabilities
  </Card>

  <Card title="Repository Access" icon="folder-open" href="/team/repository-access">
    Control who sees which repositories
  </Card>
</CardGroup>
