> ## Documentation Index
> Fetch the complete documentation index at: https://docs.msghello.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Users & Team

> Invite colleagues and control their permissions through roles.

You manage the members of your tenant yourself: you invite people and control what they are allowed to do through **roles**. Each tenant is a self-contained environment – users and permissions apply only within your tenant.

## Inviting users

<Steps>
  <Step title="Create an invitation">
    Enter the **email address** of the person to invite and select the intended **roles**.
  </Step>

  <Step title="Invitation is sent">
    The person receives an email with an invitation link.
  </Step>

  <Step title="Join on first login">
    When the person signs in with the invited email address, they are automatically added to your tenant with the intended roles.
  </Step>
</Steps>

## Roles and permissions

Permissions are granted through **roles** – not individually per person. A role bundles permissions (e.g. view calls, edit agents, change settings).

There are two kinds of roles at the tenant level:

<CardGroup cols={2}>
  <Card title="Standard roles" icon="user-shield">
    Predefined roles with a fixed set of permissions.
  </Card>

  <Card title="Custom roles" icon="user-pen">
    Roles that you can **freely define** with individually assembled permissions – tailored to your organizational structure.
  </Card>
</CardGroup>

Roles can be assigned and adjusted at any time. This gives you fine-grained control over who may use which areas and actions in the portal – for example, only the call analysis, or additionally the agent configuration.

<Info>
  The visibility of menu items and actions in the portal depends on the permissions of the respective role. If colleagues cannot see something, first check their assigned roles.
</Info>

<Note>
  Sign-in itself is handled via your organization's Single Sign-On (SSO). Passwords and login procedures are managed centrally through your identity provider, not in msg.Hello.
</Note>