---
title: "Invite and manage members in custom groups"
description: "Custom group membership lets you invite a person, add an existing person or Agent Identity, and remove members."
lang: en
status: public-preview
lastUpdated: 2026-09-26
url: https://duale.ai/en/docs/identity/members-and-groups
---

## AI-generated summary

Invite people into custom groups, add existing identities, and manage membership using Dashboard actions or the Profile API.

- Requires profile:manage_member and authority to confer the selected group's permissions.
- Invitation links contain a one-time credential and expire after four hours.
- Adding an existing identity to a group requires profile:manage_group on that group.
- The Dashboard cannot create custom groups; that requires a user-authenticated Profile API integration.
- Changing a supplied human tier requires the user-authenticated Profile API with profile:manage_tier.

Summaries were generated by AI.

---

Invite a person into an existing custom group, then check that they joined. You can also add an existing person or
Agent Identity to a custom group. [Identity](https://duale.ai/en/docs/identity.md) explains why a group grants access but never acts.

## Before you invite someone

You need `profile:manage_member` on your Tenant and authority to confer the selected group's permissions. The
Dashboard invitation form lists custom groups, not the [platform-supplied tiers](https://duale.ai/en/docs/identity/default-policies.md).
Choose a group whose access the invited person needs, and review its assigned policies under **Access Groups**.

If no custom group is available, stop here. The Dashboard cannot create one. Contact your Tenant's technical owner:
creating a custom group requires a user-authenticated Profile API integration. An Agent Identity token cannot make
this administrative change.

## Invite a person into a custom group

1. Open **Team Members** and choose **Invite Member**.
2. Enter the person's email address and select at least one custom group. Choose **Create Invitation**.
3. Copy the invitation link from the result while it is visible. The invitation is created even if email delivery
   fails, so do not treat creation as proof that the person received the message. If needed, share the link with that
   person through a trusted channel. The link contains a one-time credential and expires after four hours.
4. Ask the person to open the link, sign in when prompted, and accept the invitation. Check **Team Members** to confirm they joined,
   then check the selected group's **Members** tab for their membership.

If the result contains no link, check pending invitations before creating another one. A second request for an
address with a pending invitation can be refused as a duplicate. If acceptance is refused, check that the person's
account has the invited email verified and that the invitation has not expired. If both are valid, ask the inviter to
review their authority to grant the selected groups.

## Change membership in an existing custom group

To add a person who already belongs to the Tenant, or an Agent Identity, open **Access Groups**, choose the custom
group, then open **Members** > **Add Member**. Select the identity and confirm. This change requires
`profile:manage_group` on that group and authority to confer its permissions. Check that the identity appears in the
group's member list.

To remove a member, use the action on that same list and check that the identity disappears. Removal takes away this
group's contribution, but another group or a direct policy can still allow the same operation. Check the intended
operation and a neighboring operation after the [authorization propagation
window](https://duale.ai/en/docs/identity/credentials-and-lifecycle.md#allow-for-authorization-propagation-separately).

To change a supplied human tier, use the user-authenticated Profile API with `profile:manage_tier`; the Dashboard has
no tier editor. [Default policies](https://duale.ai/en/docs/identity/default-policies.md) owns the tier rules and review steps.

## Related content

- [Author and bind Tenant access policies](https://duale.ai/en/docs/identity/policies.md)
- [Supplied access policies and tier permissions](https://duale.ai/en/docs/identity/default-policies.md)
- [Manage Agent Identity credentials and token lifecycle](https://duale.ai/en/docs/identity/credentials-and-lifecycle.md)
- [Tenant identity and access management](https://duale.ai/en/docs/identity.md)
- [Ownership and approvals for model routing changes](https://duale.ai/en/docs/model-routing/ownership-and-approvals.md)
- [Identity policy limits and access boundaries](https://duale.ai/en/docs/identity/limits.md)

---

## Sitemap

See the full [Markdown sitemap](https://duale.ai/sitemap.md) for all pages.