Invite and manage members in custom groups
Custom group membership lets you invite a person, add an existing person or Agent Identity, and remove members.
Invite people into custom groups, add existing identities, and manage membership using Dashboard actions or the Profile API.
- Requires profile:manage_member and authority to confer the selected group's permissions.
- Invitation links contain a one-time credential and expire after four hours.
- Adding an existing identity to a group requires profile:manage_group on that group.
- The Dashboard cannot create custom groups; that requires a user-authenticated Profile API integration.
- Changing a supplied human tier requires the user-authenticated Profile API with profile:manage_tier.
Summaries were generated by AI.
Invite a person into an existing custom group, then check that they joined. You can also add an existing person or Agent Identity to a custom group. Identity explains why a group grants access but never acts.
Before you invite someone
You need profile:manage_member on your Tenant and authority to confer the selected group’s permissions. The
Dashboard invitation form lists custom groups, not the platform-supplied tiers.
Choose a group whose access the invited person needs, and review its assigned policies under Access Groups.
If no custom group is available, stop here. The Dashboard cannot create one. Contact your Tenant’s technical owner: creating a custom group requires a user-authenticated Profile API integration. An Agent Identity token cannot make this administrative change.
Invite a person into a custom group
- Open Team Members and choose Invite Member.
- Enter the person’s email address and select at least one custom group. Choose Create Invitation.
- Copy the invitation link from the result while it is visible. The invitation is created even if email delivery fails, so do not treat creation as proof that the person received the message. If needed, share the link with that person through a trusted channel. The link contains a one-time credential and expires after four hours.
- Ask the person to open the link, sign in when prompted, and accept the invitation. Check Team Members to confirm they joined, then check the selected group’s Members tab for their membership.
If the result contains no link, check pending invitations before creating another one. A second request for an address with a pending invitation can be refused as a duplicate. If acceptance is refused, check that the person’s account has the invited email verified and that the invitation has not expired. If both are valid, ask the inviter to review their authority to grant the selected groups.
Change membership in an existing custom group
To add a person who already belongs to the Tenant, or an Agent Identity, open Access Groups, choose the custom
group, then open Members > Add Member. Select the identity and confirm. This change requires
profile:manage_group on that group and authority to confer its permissions. Check that the identity appears in the
group’s member list.
To remove a member, use the action on that same list and check that the identity disappears. Removal takes away this group’s contribution, but another group or a direct policy can still allow the same operation. Check the intended operation and a neighboring operation after the authorization propagation window.
To change a supplied human tier, use the user-authenticated Profile API with profile:manage_tier; the Dashboard has
no tier editor. Default policies owns the tier rules and review steps.