User Invitations¶
Only the Admin of an organization can add users to it. The general model:
- Admin adds a user to the organization (by email).
- The user logs in via Google or Microsoft SSO on that email.
- Access to data appears once the admin has approved the user.
Adding a user¶
- Settings → Members → Add user.
- Enter the user's corporate email — it must be in your organization's domain (otherwise SSO won't work).
- Pick a role: Admin or User (see Roles).
- Save.
The user appears on the members list with status Pending (until the first login).
What the user does¶
The added user goes to https://bcp.bytecode.team:
- Clicks Sign in with Google or Sign in with Microsoft — the one matching their corporate email.
- Authorizes the platform in the OAuth flow.
- If the admin has already added them — access opens immediately.
- If they show up before being added — they see the "Awaiting approval" screen and should contact the admin.
Approving¶
If a user tries to log in before the admin added them, they land in a queue: Settings → Members → Pending Approvals. Admin sees them and can:
- Approve → grant a role, user gets access.
- Reject → refuse (user sees "Access denied" screen).
Removing a user¶
- Settings → Members.
- Find the user → Remove from organization.
- Confirm.
The user loses access immediately. Findings they created/closed remain (attribution preserved).
Changing a role¶
Settings → Members → click on the user's current role → pick another (Admin / User) → Save.
Bulk operations¶
- Add multiple users — paste a list of emails (one per line), all get the same role.
- CSV import — for onboarding a large team at once.
FAQ¶
Can I add a user with a personal Gmail? No. Access is granted only through corporate SSO — email must be in the domain of the organization registered on the platform.
A user's SSO worked, but they see "Awaiting approval". What should I do? This means they logged in before an admin added them. Go to Settings → Members → Pending Approvals and approve.
Can a user leave the organization on their own? No — deletion happens only through an admin. Users who lost their SSO access (left the company) automatically stop being able to log in.