Team
Adding, deactivating, and reactivating the people who have access to your company in Greenroom
There is no "User Management" tab in Greenroom
This page's URL (/docs/settings/user-management) is a holdover from older documentation. In the actual product, the tab is called Team, found at Settings → Team, and it works differently from what older materials describe — no email invitations, no Administrator/Payroll Administrator/Viewer role tiers, and no "Remove user." Details below are verified directly against current product source (see sourceRef above). If you're looking for "User Management" in the app and can't find it, click Team instead.
Go to Settings → Team to see everyone with access to your company, add a new team member, or deactivate someone who's left the production.
Roles
Greenroom has two roles, and only one of them is something you assign:
| Role | Who has it | Access |
|---|---|---|
| Company manager | Everyone you add from this screen | Full access to this company — Settings, payroll, payees, reports, everything. There's no reduced or view-only tier. |
| Super admin | Greenroom staff only | Oversees every company on the platform through a separate internal tool. Not created or managed from your Team tab — the invite form only ever creates company managers. |
There's no "Administrator vs. limited vs. read-only" split among your own team. Every company manager you invite has the same full access to your company — if you need someone to have less access than everyone else, that's not currently possible to configure.
Adding a team member
Click Invite member and fill in:
| Field | Notes |
|---|---|
| First name | Required |
| Last name | Required |
| Required — must not already belong to another Greenroom user | |
| Role | Fixed to "Company manager." This isn't editable from the invite form. |
Click Create member. Unlike a typical email invitation, Greenroom doesn't send anything automatically — the account is created immediately, and a one-time credentials screen shows the person's email and a system-generated temporary password (something like Xk3m-Rf8p-Tn2q). A Copy credentials button copies both. You're expected to pass these along yourself — a phone call, a text, whatever channel your production already trusts.
That password is shown exactly once
Once you close the credentials screen, the temporary password can't be retrieved again — Greenroom only ever stores a hash of it, never the plaintext. If you lose it before sharing it, don't worry: the new team member can just use Forgot your password? on the sign-in page to set their own. See Signing In for the full password rules (10-character minimum, no other format requirements) and what to do about lockouts.
There's no "pending invitation" state to track — the account exists and is usable the moment you click Create member, whether or not the person has seen their credentials yet.
The team list
| Column | Shows |
|---|---|
| Name | The team member's name. A You badge marks your own row. |
| Their sign-in email. | |
| Role | Company manager (or Super admin, though a super admin would never normally show up in a tenant's own Team list). |
| Access | Active (green) or Deactivated (yellow) — this company's membership status. |
A member whose underlying account has been disabled entirely (not just deactivated from this company) shows an additional Account disabled badge.
Deactivating and reactivating access
There's no "Remove" — Greenroom deactivates instead of deleting, so history stays intact:
- Deactivate revokes that person's access to this company immediately. Confirm the dialog and it takes effect right away.
- Reactivate restores it, any time, with no new invitation needed.
Two guardrails prevent your company from getting locked out:
- You can't deactivate yourself. The button simply isn't offered on your own row.
- You can't deactivate your company's last active member. Greenroom blocks it with "A company needs at least one active member."
Deactivating someone doesn't erase their history — their name still appears correctly on past activity, payrolls, and audit entries; deactivation only cuts off future access.
What this page doesn't cover
Team is about who has access to your company — it isn't where you or a teammate manage personal login security. That's under Settings → Me:
- Changing your own name or email
- Two-factor authentication, passkeys, and recovery codes — see Authentication & Recovery Codes
A company manager can't see or reset a teammate's password, or clear their two-factor lockout, from anywhere in Greenroom. From Team, the only lever you have over someone else's account is deactivating or reactivating their access to the company as a whole — a blunter, separate action. If a teammate is locked out of their password or their second factor, point them to Signing In and Authentication & Recovery Codes — they have to resolve it themselves.
Next Steps
See Company Settings for company identity and banking display info, Payroll & Chart of Accounts Settings for GL coding, or Onboarding Documents & Packets for the documents payees sign.