Settings & team
Invite users and assign roles in Naffes CRM
Adding your team to Naffes CRM is done by email invitation, with the admin choosing each person's role up front. The role decides what someone sees and what they can edit or delete, so pick it before you send.
Before you start
- Who can invite: the Owner, or anyone whose role carries the administer workspace permission. The Manager role is not enough to send invitations.
- Your plan's user cap: by default 1 user on Free, 3 on Starter, 10 on Pro and no cap on Enterprise. An invitation beyond the cap is refused with an upgrade prompt, and a trial whose owner has verified their email has no caps. Compare plans.
Steps
Open Users
Go to Settings → Team & Access → People → Users.
Send invitations
Click Invite user. In Invite users, type addresses and press Enter, comma or space after each one, so you can invite several people at once.
Choose the role and team
Select Roles, and if you use teams select Teams too, since team-level permissions depend on them. Click Send invites. Each invitee sets their own password on first login.
Follow pending invitations
They appear under Pending invitations with Copy link (to send the link through another channel), Resend and Revoke.
Review join requests
People who signed up with your company's email domain and asked to join show up under Join requests on the same page. Click Accept or Decline; their account is created only on acceptance.
The four built-in roles
| Role | What it can do | Suits |
|---|---|---|
| Owner | Everything, including billing, roles, invitations and the audit log | The account holder or general manager |
| Manager | Views and edits all records and deletes the team's, without administering the workspace | A sales or support manager |
| Member | Creates and edits own records; sees the team's records and all contacts and companies | A rep or support agent |
| Viewer | Read-only | Executives or an external auditor |
If none fits, build a custom role with own, team or all-level permissions and hide sensitive fields: see creating a custom role and hiding fields.
Troubleshooting
- The invitation never arrived: ask the invitee to check spam, or use Copy link and send it to them directly.
- A colleague created a separate account instead of joining: join requests work with company domains only; public Gmail, Outlook and iCloud addresses are not matched. Send them a direct invitation.
- An upgrade prompt appeared: you have reached your plan's user cap. Upgrade, or remove a user who is no longer active.
- Once they are in, lock it down: ask everyone to turn on two-factor authentication on their own account.