People are invited to a workspace by email, with a role attached.
The steps
- Open Settings → Roles and permissions.
- Invite the person by email address.
- Choose their role.
They receive an invitation and set their own password. An invitation that has not been accepted can be resent or revoked.
The role is the decision
Everything the person can see and do follows from it — which areas appear, what they can change, and what the assistant will answer for them. See roles and permissions.
Give the narrowest role that lets somebody do their job. Widening it later takes a moment; discovering that a field technician could see payroll does not.
Removing someone
Remove them from the workspace when they leave, the same day. Access left in place is the most common offboarding gap, and it is invisible until it matters.
That is only their Omnyra access. Access to your other systems is tracked separately in team access — the two are different lists and both need working through.
Workspace, not account
A person's login is theirs and can reach several workspaces. Removing them here removes their access to this workspace only — see workspaces.