# User management

## What is this?

User management shows every member of the organization, their role, and
pending invites — on its own standalone page. Every member can see it; who
can invite, change roles, or remove members depends on their own
permissions.

## How to use it

- **Invite a member:** Only visible with the *invite members* permission
  (Admin role and above). Choose an email address and role, then "Send
  invite" — the invite then appears under "Pending invites" until it's
  accepted.
- **Change a role:** Via the dropdown in a member's row — only with the
  *change roles* permission, and never for yourself or the owner.
- **Remove a member:** Via the trash icon — only with the *remove members*
  permission, also never for yourself or the owner.
- **Role overview:** The tiles at the top count members per role; the
  "Roles & permissions" section briefly explains what each role can do.
- **Traceability:** Every role change and every removal is recorded in the
  audit log (Quality → Audit log) — with the actor, the affected member, and
  both the previous and the new role.

**Approving reports** (electronic approval under ISO/IEC 17025, see
`berichte`) is limited to admins and owners. Members can generate reports but
not approve them — anyone who should approve reports needs at least the Admin
role.

## Common issues

- **"I can see the page but can't change anything."** Reading
  (`members:read`) is the baseline permission for every role, starting at
  Viewer. Inviting, changing roles, and removing are separate permissions
  that only come with Admin and above.
- **"I can't remove or demote myself."** Intentional — otherwise an
  organization could be left without an administrator. Another admin or the
  owner has to do it.
- **"The owner can't be changed/removed."** Intentional — ownership doesn't
  transfer via this page.

---

Source: https://www.testlabiq.com/en/help/user-management