Add users and configure access

Who can perform the task

Organization administrators.

Before you begin

Decide the least-privilege role and whether edit or review access should later be restricted to specific table codes. Confirm the invitee's individual work email through an approved channel. Check the organization billing plan has an available user seat. Each unexpired pending invitation reserves one seat.

Quick path

1. Open the organization access settings.
2. Invite the user with the least-privilege organization role they need.
3. Add table-level restrictions when their work must be narrower than the role.
4. Send the invitation and verify the intended email and expiry.
5. After acceptance, confirm the user can see only the authorized organization, filings, and tables.

Detailed guidance

1. Open any filing in the organization and expand Review and audit.
2. Enter the invitee email, choose a role, and select Send invitation.
3. Confirm the invitation appears under Pending invitations with its seven-day expiry. Revoke it immediately if the email or role is wrong.
4. The invitee opens the single-use link, signs in or creates an account with the invited email address, and selects Accept invitation.
5. For a preparer or reviewer, optionally configure table-level edit or review access after acceptance.
6. Ask the user to verify access in a separate session.
7. When a person leaves the team, expand their table permissions, select Remove organization access, and confirm. Their organization access ends immediately. Your own access and the final administrator cannot be removed through this control.

Expected result

After acceptance, the member appears with the intended role. The invitation can be accepted only once and disappears from the pending list. An empty allowlist means organization-role defaults apply; a populated allowlist restricts the capability to the listed tables.