CRMcy Docs

Invite your team

Bring colleagues into the tenant with role-based access.

Last updated 2026-05-05

Invitations are role-scoped from day one. From Staff → Members click Invite and enter one or more email addresses, pick a role (Owner, Manager, Staff, Custom), optionally restrict departments, and send. Invitees receive a single-use link valid for 7 days; first sign-in prompts for password creation and TOTP enrollment if your tenant requires MFA. Pending invites appear under Staff → Invites and can be revoked, resent, or have their role changed before acceptance.

For larger orgs, bulk-invite via CSV from the same screen — columns are email,role,department (department optional).

Related endpoints

  • POST /api/tenant/invites — create one or more invitations.
  • GET /api/tenant/invites — list pending invites.
  • DELETE /api/tenant/invites/:id — revoke an invite.
  • POST /api/auth/accept-invite — completes the invite handshake.

See the source at apps/web/src/app/(tenant)/staff/members and apps/api/src/staff/invites.