> ## Documentation Index
> Fetch the complete documentation index at: /docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Invite & Manage Members

> Invite people to an Arize AX space, organization, or account, and manage pending invitations and existing members.

Invite team members to Arize AX to collaborate on projects and control who has access to your resources. You assign roles as part of the invitation, so each member has the access you chose the first time they sign in. See [Roles](/docs/ax/security-and-settings/sso-and-rbac/account-and-space-roles.md) for what each role allows.

## Invite members

> [tab] From a space
>
> 1. Go to **Settings → Space Settings → Space Members** and click **Add Members**. Account Admins can also open this dialog from **Invite User** in the left navigation.
> 2. Type or paste up to 50 email addresses, separated by spaces, commas, or semicolons, or search for existing members.
> 3. Choose a **space role** for each person, managed or [custom](/docs/ax/security-and-settings/sso-and-rbac/account-and-space-roles.md#custom-roles).
> 4. **Advanced settings** appears on Enterprise, self-hosted, and locked-role accounts when an email is new to the account. It sets the **Account role** and **Organization role**.
> 5. Click **Invite**.
>
> ![Invite people to a space dialog with the email field and Invite button](https://storage.googleapis.com/arize-assets/doc-images/space-members-invite.webp)

> [tab] From an organization
>
> 1. Go to **Settings → Org Settings → Org Members** and click **Add Member**.
> 2. Account Admins on accounts without SAML choose between **Add an existing member of the account to this organization** and **Add a new user to the account and organization**. Everyone else selects an existing account member.
> 3. Choose the **organization role** for each person.

> [tab] From the account
>
> 1. Go to **Settings → Account Settings → Account Members** and click **Add Member**.
> 2. On the **User** step, enter the **Full Name**, **Email**, and **Account Role**.
> 3. On the **Organizations** step, assign organization and space roles.
> 4. On the **Invite method** step, choose **Email** or **Generate temporary password**. **Email** sends a setup link. **Generate temporary password** creates the user with a password you copy. The button reads **Send Invite** for email and **Create User** for a generated password.

An invitation creates the user and assigns their roles in the same step. The account and organization roles are always set. A space role is set as well when you invite from a space or from the account wizard.

Account Admins can invite any role. Members and Member - UI Only users can also invite unless the account disables member invites, and Annotators cannot invite at all. On accounts that lock member roles, the invite form hides roles above the inviter's own.

`POST /v2/users` in the [RBAC REST API](/docs/ax/security-and-settings/sso-and-rbac/rbac-rest-api.md) invites users programmatically. It accepts `ADMIN`, `MEMBER`, or `ANNOTATOR`, so it cannot create Member - UI Only users.

> [!NOTE]
>
> With [SAML enforcement](/docs/ax/security-and-settings/sso-and-rbac/saml-configuration.md) on, you cannot invite new email addresses, because your identity provider creates those users at first login. With **Sync permissions on each login** on, roles changed by hand are overwritten at the next login. A **Domain Whitelist** under **Account Settings → Security** limits invitations to approved domains.

## Manage members

You can change a member's role from the members table. Pending invitations can be resent or revoked.

Removing a member from a space removes their access to that space. Removing a member from the account or an organization blocks their access to it.

The Space Members page also has an export option, and service keys are listed on a separate **Service Bots** tab. See [Service Keys](/docs/ax/security-and-settings/service-keys.md).
