> ## Documentation Index
> Fetch the complete documentation index at: https://help-loyalife.xoxoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage team

> Invite users, assign roles, manage account status, and create custom permission roles for your Loyalife team.

The Manage Team section gives program administrators control over who has access to Loyalife and what each person can do. It's split into two areas: **Users** and **Roles**.

## Accessing team management

Go to **Access Controls** in the left sidebar. The Users tab is shown by default.

<Frame>
  <img src="https://mintcdn.com/loyalife/qrVHhOQjsuYfuDpe/images/manage-team-users.png?fit=max&auto=format&n=qrVHhOQjsuYfuDpe&q=85&s=0e933175197933de899fbfc8d5845cbc" alt="Manage Team — Manage Users tab listing all admin users with Name, User Name, role, Date Created, Last Login columns and an Add New User button" width="2000" height="1082" data-path="images/manage-team-users.png" />
</Frame>

## User management

### Inviting a user

<Steps>
  <Step title="Go to Access Controls → Users">
    Click **Invite User**.
  </Step>

  <Step title="Enter user details">
    Provide the user's name and email address.
  </Step>

  <Step title="Assign a role">
    Select one or more roles for this user. Roles determine which modules they can access and what actions they can take.
  </Step>

  <Step title="Send the invitation">
    The user receives an email invitation with a link to set up their password and activate their account.
  </Step>
</Steps>

<Frame>
  <img src="https://mintcdn.com/loyalife/qrVHhOQjsuYfuDpe/images/manage-team-add-user.png?fit=max&auto=format&n=qrVHhOQjsuYfuDpe&q=85&s=16f90925a379537c15aa2d00234a1c72" alt="Adding a New User modal showing User Information section with Email, Username, First Name, Last Name, and Phone fields, plus a Select a Role dropdown at the bottom" width="2000" height="939" data-path="images/manage-team-add-user.png" />
</Frame>

### Managing existing users

From the Users list, open the three-dot Actions menu on any user to access management options:

| Action             | When to use                                                                    |
| ------------------ | ------------------------------------------------------------------------------ |
| Edit user          | Update name, email address, or role assignments                                |
| Reset password     | Trigger a password reset email for a locked-out user                           |
| Lock account       | Temporarily prevent the user from logging in                                   |
| Unlock account     | Restore login access to a locked account                                       |
| Archive user       | Remove a user who has left the organisation — their audit history is preserved |
| Unarchive user     | Reactivate a previously archived user                                          |
| Download user list | Export all users and their role assignments as a CSV                           |

<Frame>
  <img src="https://mintcdn.com/loyalife/qrVHhOQjsuYfuDpe/images/manage-team-view-user.png?fit=max&auto=format&n=qrVHhOQjsuYfuDpe&q=85&s=e62a2a202cfedd36290f3d2d5e141833" alt="View User detail page showing User Information panel with Name, Email, Phone, and Role fields, followed by collapsible permission sections for User Access Management, Platform Configuration, and Member modules listing each granted action item" width="2000" height="1117" data-path="images/manage-team-view-user.png" />
</Frame>

### Reactivating locked or archived users

If an admin tries to invite a user with an email that belongs to a currently locked or archived account, Loyalife detects the duplicate and shows:

> "This email is associated with a locked/archived user. The existing user will be reactivated upon approval."

When the Maker-Checker workflow is enabled, this reactivation request enters the approval queue. The audit trail records:

* At the Maker stage: "Request submitted to unlock/unarchive existing user \[username] for email \[email]"
* At the Checker stage: "User \[username] unlocked" or "User \[username] unarchived"

This prevents confusion with the previous "User created" message, which was misleading because the user already existed.

## Role management

Roles define what a user can see and do. Every module in Loyalife has configurable permissions, and a role is a named bundle of those permissions.

### Viewing roles

Click the **Roles** tab to see all existing roles.

<Frame>
  <img src="https://mintcdn.com/loyalife/qrVHhOQjsuYfuDpe/images/manage-team-roles.png?fit=max&auto=format&n=qrVHhOQjsuYfuDpe&q=85&s=abd3440b4298e203ba7081a89581f1f0" alt="Manage Team — Manage Roles tab showing All Roles list with Role name, Access (X of 59 permissions), Number of Users, and Actions columns — displaying Customer Executive, Program Manager, Program Admin, and Super Admin roles" width="2000" height="1111" data-path="images/manage-team-roles.png" />
</Frame>

Each role entry shows:

* Which modules it grants access to
* The permission level per module (View, Edit, Create)
* How many users currently hold this role

### Creating a custom role

<Steps>
  <Step title="Click Create Role">
    From the Roles tab, click **Create Role**.
  </Step>

  <Step title="Name the role">
    Give the role a descriptive name that reflects its function — for example, "Claims Approver" or "Campaign Manager — View Only".
  </Step>

  <Step title="Set permissions per module">
    For each module, select the permission level:

    | Level  | Grants                                         |
    | ------ | ---------------------------------------------- |
    | None   | No access — module is not visible to this role |
    | View   | Read-only access                               |
    | Edit   | Can modify existing records                    |
    | Create | Full access including creating and deleting    |

    Some modules have additional permissions beyond the standard levels. For example:

    * **Approve Assigned Invoices** — for Claims approvers
    * **Verify Onboarding Requests** and **Approve Onboarding Requests** — for the Maker and Checker in partner onboarding
    * **PI Data Access** — for exporting personally identifiable member data
  </Step>

  <Step title="Save">
    Save the role. It is immediately available for assignment when inviting or editing users.
  </Step>
</Steps>

<Frame>
  <img src="https://mintcdn.com/loyalife/qrVHhOQjsuYfuDpe/images/manage-team-create-role.png?fit=max&auto=format&n=qrVHhOQjsuYfuDpe&q=85&s=121e013ca224e89ed3f166fdbdf083eb" alt="Creating a New Role modal showing Add Role Details section with Role Name and Role Description fields, followed by permission sections for Programs and User Access Management with individual toggle switches per action item" width="2000" height="1078" data-path="images/manage-team-create-role.png" />
</Frame>

<Warning>
  The **Create** permission on most modules also grants the ability to delete. Review the specific module's permission details before assigning broad roles.
</Warning>

### Built-in roles

Loyalife includes default roles that cover the most common team structures. These can be used as-is or cloned as a starting point for customisation.

### Downloading role reports

Click **Download** from the Roles tab to export a CSV of all roles and their full permission configurations. Use this for internal access reviews, audit documentation, or onboarding new team members.

## Permissions reference

| Action                  | Required permission |
| ----------------------- | ------------------- |
| Invite users            | Manage Users        |
| Edit user roles         | Manage Users        |
| Lock/unlock accounts    | Manage Users        |
| Archive/unarchive users | Manage Users        |
| Create/edit roles       | Manage Roles        |
| Download user list      | View Users          |
