Skip to main content
Version: latest

Invite a team member

VaultPAM uses a role-based model inside each organization. Invite a colleague, pick their role, optionally assign them to Safes immediately.

Roles at a glance​

  • Owner — full control, including billing.
  • Admin — manage users, Safes, Resources, policies. Cannot delete the organization.
  • Operator — launch sessions on Safes they are a member of.
  • Auditor — read-only access to sessions, recordings, audit events. Cannot launch sessions.

Steps​

  1. Open Organization → Members → Invite.
  2. Enter the colleague's email. You can add multiple comma-separated addresses.
  3. Pick a Role.
  4. (Optional) Under Assign to Safes, tick Safes they should immediately join.
  5. (Optional) Enable Require MFA enrolment at first sign-in if your org policy does not already enforce it.
  6. Click Send invitation.

The invitee receives an email. They click the link, verify their email, set a password (or SSO), and enrol MFA on first sign-in.

Bulk invite from Entra / AD​

If you have an Entra or AD sync configured, you can skip individual invitations — new members appear automatically when they land in the synced group.