Users

Users is where you manage everyone who can reach the admin console. You invite people by email, review and grant externally synced candidates, open each member's record to manage their profile, role, devices, and activity, and deactivate access when someone leaves.

Users lives in the People group of the main sidebar, at /users. The read-only permissions matrix for the built-in roles lives in Settings, under Roles & permissions.

How the page is organized

The page has three tabs along the top, each with a live count next to its label. The Invite user button sits at the top of the page and is visible to admins who can manage members.

Roles

Three roles are available. The word "Inspector" is the default label and can be configured per shell.

These are base roles: the full matrix of what each one can do is shown read-only in Settings under Roles & permissions. An admin's access can additionally be narrowed with Limited admin: when enabled for your organization, specific capabilities are denied per member from the Access & permissions tab of their record. Denials follow a delegation rule: you can add denials you yourself carry to another admin, but never remove a denial you carry.

Invite a user

Use invites to add people who do not yet have an Auditmark account, or who need to join your specific organization.

1. Select Invite user at the top of the page.
2. Enter the person's email address and choose a role: Inspector, Approver, or Admin. The Admin option is available only when your own role may delegate it.
3. Leave Send invite email on to have Auditmark email the invite, or turn it off to distribute the code and link yourself.
4. Create the invite. You then see the invite code and link to share; the person joins by opening the link, or by signing in with Google or Microsoft and entering the code when prompted.

To re-send or cancel an invite that already exists, use the Invites tab.

People

The People tab lists everyone in your organization. Above the table you can search by name, email, or position, filter by role, and (when live presence is enabled for your organization) show only people who are online now. The More menu adds three further filters:

Selecting a member's name, or View details from the row menu, opens their full-page record (below). Rows for invited people who have not yet joined have no record; manage those from the Invites tab.

You can also select several people with the row checkboxes and sign them out everywhere in one action from the bar that appears above the table.

The member record

Each member has a full-page record, opened from their name in the People tab. The header shows their name, role, and status, with actions to edit the profile and to deactivate or reactivate the member. Four tabs organize the detail:

Deactivate a member

Open the member's record, then choose Deactivate from the actions menu. A confirmation dialog explains that the member loses access; the change is reversible with Reactivate from the same menu. Deactivated members stay visible in the People tab with status Deactivated.

Invites

The Invites tab lists invitations that have not yet been redeemed, with a search box for finding an invite by email.

Each row's actions: Resend issues the invite again to the same address (re-sending an admin invite is restricted to roles that may delegate admin), and Revoke cancels it immediately so the link and code stop working. To give the person access again after a revoke, create a new invite.

Candidates

The Candidates tab has two parts: the directory sources you have connected, and the external candidates those sources surface.

Directory sources

Directory sources connect an integration so people sync automatically into the candidates list, without sending individual invites. Each connection can have one directory source. Before you add a source you need an active connection. See Marketplace to set one up.

To connect a source:

1. Select Connect directory.
2. Choose an integration connection from the list. Each option shows the provider and, when set, the connection title. If you have no active connections, the dialog tells you to add an integration first.
3. Select Connect.

The directory sources table:

When there are no sources, the table shows "No directory sources yet. Connect one to start syncing people."

To run an immediate sync, select Sync now on a source row. When the run finishes, a toast reports the outcome:

External candidates

External candidates are people surfaced from a connected directory source. They are not yet members. You review each one and decide whether to grant access. When there are none, the table shows "No candidates yet. Connect a directory source to start syncing people."

Grant access

For a candidate with status candidate or revoked:

1. Choose a role from the selector on their row. The options are Inspector and Admin. Approver is not offered for directory-sourced candidates.
2. Select Grant. The status changes to granted, and the row shows "Awaiting first login."

After the person signs in for the first time, the status changes to activated and they appear as an active member in the People tab.

While a candidate is granted but has not yet logged in, select Revoke on the row to cancel before they sign in.

Left source

When a person no longer appears in the connected external directory, Auditmark flags them with source status "Left source" and shows a Review button on the row. Auditmark never auto-revokes access. You act explicitly:

1. Select Review.
2. The dialog explains that the person no longer appears in the connected directory.
3. Choose Revoke access to remove their access, or Dismiss to close the dialog and leave their access unchanged. Dismiss does not clear the notice; the Review button stays until the situation is resolved.

Related pages

• Marketplace: set up the connections that power directory sources.
• Settings: the read-only Roles & permissions matrix.
• Approvals: how the Approver role fits into the inspection lifecycle.
• Inspections: assign inspectors and track inspection progress.