Team invites & staff permissions
Govern who works inside your company tenant on Skilladder: roster, pending invites, granular toggles, and domain rules for new invite emails.
:::info Who can do what in the UI today
- Add / resend / remove team members → Primary company administrator (
isCompanyRole) or Platform administrator (isPlatformAdmin). - Company staff may open the Team tab (when permitted) but will not see Add Team Member unless they are primary or platform.
- Allowed email domains for team invites card → primary company admin only (
isCompanyPrimaryin code).
:::
Open the Team workspace
- Header → Account Settings (
/account-settings). - Click the Team tab (hidden entirely if your persona cannot access team settings).
Restrict invite emails by domain (primary admin)
When non-empty, new invites must use addresses whose domain appears in the allowlist.
- On Team, locate Allowed email domains for team invites (only if you are primary admin).
- Enter hostnames in Domains (comma-separated) (example:
acme.com, subsidiary.org). No@prefix (hint text on screen). - Click Save domains.
- Confirm success / error banner text.
Empty list = any email domain allowed for new invites (subject to other product rules).
Invite a new teammate
Actors: primary company admin or platform admin.
- Team tab → Add Team Member.
- Modal New Team Member — fill First name, Surname, Email, and pick a company Role from the dropdown (choices load from live directory).
- Submit the form; wait for confirmation.
- Recipient receives email:
- Brand-new user →
/team-invite/[share-id]password setup, then sign-in routing. - Existing active user → notification email referencing sign-in (no duplicate password flow).
- Brand-new user →
Resend or remove
Actors: primary company admin or platform admin only (same canManageTeam gate).
- Locate the row in the team table (Pending invite badge shows expiry date when available).
- Resend invite link for pending rows (debounced in UI—do not double-click rapidly).
- Trash icon Remove from team removes roster membership (confirmation dialog).
Edit granular permissions (company staff only)
Actors: primary company admin or platform admin; target row must be staff RBAC (isRbacCompanyStaffUser).
- Click pencil — Edit access on the row.
- Modal Edit access lists toggles:
- Create assessments
- View results & analytics
- Invite candidates / share
- Question bank (browse route)
- Manage assessment templates
- Adjust checkboxes; Save permissions.
Copy on screen: “The Role column still comes from your company roles (Admin, Viewer, etc.).” — toggles layer Skilladder capabilities on top of directory role labels.