# Users, teams and roles

Invite people to your organization, assign roles and group members into teams.

Source: https://www.offgen.ai/docs/admin/members

Manage who can use offgen in your organization and what each person may do.

**Where:** [Organization](https://app.offgen.ai/organization) at app.offgen.ai · **Who:** Owners and Admins

## Invite people

1. Open [Organization → Users](https://app.offgen.ai/organization/users).
2. Under **Invite a user**, enter an email address and pick a role.
3. Select **Send invite**.

The person gets an email and joins your organization when they sign up or sign in. Invites show as **Pending** until accepted. Use **Resend email** or **Cancel invite** in the list.

To remove someone, select **Remove** next to them in the list and confirm with **Remove member**. They lose access to the organization immediately.

> offgen can also add everyone who signs in from your Microsoft tenant or your email domain automatically, as Members. Ask [support@offgen.ai](mailto:support@offgen.ai) to set this up. For sign-in and SSO, see [Security and privacy](/docs/admin/security#sign-in-and-single-sign-on-sso).

## Roles

Every user has at least one role. A user can hold several roles and gets every permission from each of them.

| Role       | What they can do                                          |
| ---------- | --------------------------------------------------------- |
| **Viewer** | Runs workflows, but can't create or edit them.            |
| **Member** | Creates and edits workflows and templates.                |
| **Admin**  | Full access to members, billing and settings.             |
| **Owner**  | Same as Admin. Only an Owner can delete the organization. |

The person who creates an organization is its Owner. You can assign Viewer, Member and Admin; Owner is not assignable.

To change a role, open the user in [Users](https://app.offgen.ai/organization/users) and edit **Roles**. **Effective permissions** shows what the user can do, combined from all roles.

## Custom roles

Create roles with exactly the permissions you need, for example a "Brand manager".

1. Open [Organization → Roles](https://app.offgen.ai/organization/roles).
2. Select **Create role**, name it and select the permissions.
3. Select **Save role**, then assign it to users.

Permissions are grouped by area, such as Workflows, Templates, Billing and [API keys](/docs/admin/api-keys). **Integrations** controls [SharePoint](/docs/sharepoint) and the [MCP connectors](/docs/mcp-connectors) shared with the organization.

You can create up to 50 custom roles. You can only grant permissions you hold yourself. Built-in roles can't be changed.

## Teams

Teams group members, for example by department. Create them under [Organization → Teams](https://app.offgen.ai/organization/teams) with **Add team**.

Each team has its own Team Library and can own workflows. Only the team's members see these templates and workflows and can add or edit them; that includes Admins, who have to join the team first. Beyond that, teams don't change access: what a user can do still comes from their roles. See [Manage templates](/docs/manage-templates#who-can-do-what).

## Related

* [Deploy the add-in](/docs/admin/deploy-add-in): install offgen for everyone in Microsoft 365
* [API keys](/docs/admin/api-keys): create keys for AI tools and integrations
* [How offgen works](/docs/getting-started/how-offgen-works): organizations, workflows and templates