Managing users, invitations & permissions

Managing who has access to your workspace and what they can do is essential for effective collaboration. This guide covers inviting users, setting permissions, and managing your team in Nestr.

Inviting users to your workspace

Only workspace admins can invite new users. There are three ways to invite people:

Method 1: Invite by email

1. Navigate to Workspace settings → Users.
2. Click Invite users.
3. In the dialog, enter one or more email addresses in the "Add emails" field.
4. Click Invite users.

Each invitee receives an email with a link to join your workspace. There is a daily limit on invitations (typically 20 per day - contact us if you need this to be higher).

Method 2: Share an invite link

In the same invite dialog, you'll find a shareable invite link. Copy and share this link with anyone you'd like to invite. If admin approval is required, new users will need to be accepted before they gain access.

Permission levels

Nestr starts with three workspace-wide permission levels:

1. Owner: full control. Transfer ownership, assign and revoke admin, delete the workspace, manage billing.
2. Admin: invite and remove users, manage settings, configure applications and integrations, grant admin to others.
3. Member: read workspace content, fill roles, participate in meetings, manage their own work.

Beyond these three, Nestr lets you fine-tune what every member can see and do through named permission profiles. Profiles can be attached directly to a user from the workspace users page, or to a role so that whoever fills the role picks the rights up while assigned and loses them again when unassigned. See Rights management for the full picture.

Changing permissions

1. Go to Workspace settings → Users.
2. Find the user in the list.
3. Click on the user to assign/revoke rights.

Editing a user's name and email addresses

Workspace admins can edit a member's full name and manage their email addresses from the same popup used to assign rights. Go to Workspace settings → Users and click a user to open their details.

Editing the full name

Change the Full name field and click Save. The name is editable only for members who have at least one email on a domain your workspace owns and has verified. For everyone else the name is read-only, and the member changes it from their own profile.

Managing email addresses

Under Email addresses you can:

• Add an address with the + ADD EMAIL button. It must be on one of your verified domains.
• Make an address primary with the envelope icon. The primary address is used as the member's main login.
• Remove an address with the trash icon.

Two safeguards apply. A member always keeps at least one address, so the last one cannot be removed. Addresses on domains your workspace does not own stay read-only and show an info icon. This read-only state applies only to admins: members can always add, change, or remove their own email addresses from their account settings, including on domains the workspace does not own. For an admin to manage a member's address, add and verify the domain first under User Permissions & Domains (see Domain-based access below).

Transferring workspace ownership

Only the current owner (or a super-admin) can transfer ownership:

1. Go to Workspace settings → Users.
2. The target user must already be an admin.
3. Click Designate owner next to their name.
4. Confirm the transfer in the dialog.

After transfer, the previous owner retains admin rights but loses owner-level control.

Removing a user

1. Go to Workspace settings → Users.
2. Click Remove next to the user you want to remove.
3. Confirm the removal.

The user is suspended from the workspace and unassigned from all active roles, projects, and tasks. They can be re-invited later if needed.

Leaving a workspace

Any member can leave a workspace voluntarily:

1. Go to Workspace settings → Users.
2. Click Leave workspace next to your own name.
3. Confirm: you'll lose access and be unassigned from all items.

Troubleshooting invitations

User doesn't receive the invitation email

• Check their spam/junk folder.
• Verify the email address was entered correctly.
• Use the (Re)send invite option next to silent users in the Users tab.

"Email is already registered" when creating a user through the API

If the email is on a domain your workspace owns and has verified, Nestr now claims the existing account and adds it to your workspace automatically, so this is no longer an error in that case. If more than one account matches that email, the request returns a conflict (409) and you choose how to resolve it. For an email on a domain you do not own, the person already has a Nestr account: ask them to log in with their existing credentials, then invite them by email.

"Only members can view this content"

The invitation may not have been accepted yet, or the user may be in a suspended state. Check the Users tab for their status and resend the invite if needed.

Domain-based access

For organisations with a company email domain, you can configure automatic access:

1. Go to Workspace settings → User Permissions & Domains.
2. Add your company's email domain.
3. Choose whether users from that domain can join automatically or require admin approval.

Newly added domains start as Pending verification and must be verified by Nestr before auto-join and the other domain features take effect. See Verifying your workspace domain.

Workspace-scoped permission profiles can attach to new members automatically when they join through a matching domain or an invite link. See the auto-apply section in Rights management.