Users

/admin/users is the platform user directory. Platform admin only (viewers can browse, not mutate).

Invite

Email, platform role (ADMIN, ADMIN_VIEWER, USER, USER_VIEWER), organization + org role, team + team role. If SMTP is configured the invitee gets an email; otherwise the UI warns and they can be pointed at the login page.

The account is INVITED until first successful sign-in, then ACTIVE. Suspended users are rejected at sign-in.

Actions

Change role, suspend / reactivate, resend invite, export CSV. The user drawer shows spend, key count and org/team memberships.

Stat cards: total, active, invited, suspended.

Grant ADMIN sparingly — ADMIN_VIEWER covers oversight without write access.