01
1. Send the invite
- Open /settings/members. Make sure your account is an admin (the page returns 403 otherwise).
- Enter the teammate's email and pick a role: operator (most), admin (can invite + configure SSO).
- Click Invite. The pending row appears immediately; the email lands within ~30s (Resend in prod, log provider in dev).
02
2. Accept the invite
- The teammate opens the emailed link — /accept-invite?token=… — set a password (10+ chars, upper / lower / digit).
- Server creates the user, issues the session cookie, redirects to /dashboard. No additional login step.
- If the tenant downgraded between invite and accept, the seat gate returns 402 and the invite is auto-expired.