User management

What is this?

User management shows every member of the organization, their role, and pending invites — on its own standalone page. Every member can see it; who can invite, change roles, or remove members depends on their own permissions.

How to use it

• Invite a member: Only visible with the invite members permission (Admin role and above). Choose an email address and role, then "Send invite" — the invite then appears under "Pending invites" until it's accepted.
• Change a role: Via the dropdown in a member's row — only with the change roles permission, and never for yourself or the owner.
• Remove a member: Via the trash icon — only with the remove members permission, also never for yourself or the owner.
• Role overview: The tiles at the top count members per role; the "Roles & permissions" section briefly explains what each role can do.
• Traceability: Every role change and every removal is recorded in the audit log (Quality → Audit log) — with the actor, the affected member, and both the previous and the new role.

Approving reports (electronic approval under ISO/IEC 17025, see berichte) is limited to admins and owners. Members can generate reports but not approve them — anyone who should approve reports needs at least the Admin role.

Common issues

• "I can see the page but can't change anything." Reading (members:read) is the baseline permission for every role, starting at Viewer. Inviting, changing roles, and removing are separate permissions that only come with Admin and above.
• "I can't remove or demote myself." Intentional — otherwise an organization could be left without an administrator. Another admin or the owner has to do it.
• "The owner can't be changed/removed." Intentional — ownership doesn't transfer via this page.