Members & roles: managing account access

What this page is for

This is where the admin on an account controls who can sign in to Verinode, what they can see once they are in, and how to take access away when someone leaves. It covers people, not equipment or vendors: inviting a colleague, changing a role, and removing a departed teammate.

It is a different surface from the workforce Team section that tracks your crews and technicians on jobs. This page is account access, who has a login and what that login can do inside Verinode. If you are looking for the crew roster used for job assignments, that lives elsewhere; this article is strictly about sign-in access to the platform itself.

Only an Admin can open this page. If you are not an Admin, visiting the URL directly redirects you back to Settings.

Where to find it

From the sidebar, open Settings. Under the Team & Access group you'll see one row:

• Members & Roles, with a live headcount (e.g. "4 people") once your account has teammates, or "Invite, assign roles, remove" before anyone else has joined.

Click it to land on Team & Access at /settings/team. The page has two stacked groups: Members (the people with a real login: Owner, Admin, and any tier-qualified Admins) and Data Contributors (a separate, free role covered in its own section below).

Roles, plainly

Verinode has three roles under the hood, but the invite and management UI only ever offers you two to choose from, plus a special status for the account's original signup:

| What you see | Who it is | What they can do | |---|---|---| | Owner | The one person on the account flagged as the billing contact. Not a role you invite someone into; it is a status a real Admin already holds. | Everything an Admin can do, plus they are the Stripe billing contact and (unless account holder status has moved) the one who can reveal the recovery Vault Key. | | Admin (shown as "Executive Admin," "Premier Admin," or "Reserve Admin" depending on your tier, or plain "Admin" on a free Contributor account) | A full-access teammate. | Acts on decisions, chats with IQ, uploads documents, views financials and benchmarks, manages vendors, clients, and jobs. Only Admins can also invite/remove people, edit company settings, and manage billing. | | Data Contributor | A free, unlimited role for people who feed data in without needing the full tool. | Forwards emails, uploads documents, and sees their own ingestion and assigned jobs. No decisions, no benchmarks, no peer numbers, no IQ chat, no settings. |

Every full-access seat, Owner or Admin, counts against your membership's Operator cap: Executive includes 1, Premier includes up to 5, Reserve includes up to 15. Data Contributors are unlimited on every tier and never count against that cap, because they don't touch the paid surface of the tool.

There used to be a fourth, plainer "User" role (full access but without invite/billing rights). It was retired from the invite and role-change menus; the two roles you can assign today are Admin and Data Contributor only. If a legacy "User" row still exists on your account from before this change, it keeps working and still shows as "User" in the member list, but you can no longer create new ones. Changing that person's role moves them to Admin or Data Contributor.

Inviting a teammate

1. On Team & Access, click Invite Teammate in the Members section header.
2. Fill in Full Name, Email, and pick a Role: your tier-qualified Admin label (e.g. "Premier Admin") or Data Contributor.
3. Click Send Invite.

Verinode emails the invite immediately. Until they accept, the invite sits in a pending queue (visible only while it's outstanding; there's no separate pending-invites list on this page beyond the toast confirming "Invite sent to [email]."). If your account is already at its Admin/Owner capacity for your tier, the invite is blocked with a message telling you the plan's limit and pointing you to upgrade.

Managing an existing member

Each row in the Members list shows an avatar, the person's role-qualified label (Owner, Executive Admin, etc.), their name (with "(You)" next to your own row), and their email as the meta line underneath.

Click Manage next to anyone but yourself (you can't manage your own row) to open an inline panel with two controls:

• Role, a dropdown to switch them between Admin and Data Contributor. The helper text under it reads: "Admins get the full tool; data contributors feed data in and see only their own work."
• Remove Access, a destructive button that removes them from the account entirely.

Click Done to close the panel without changing anything.

Changing a role

Pick the new role from the dropdown and it saves immediately, no separate save button. Two guardrails apply:

• You can't demote the last Admin. If the person you're demoting is the only Admin on the account, the change is blocked with: "You can't demote the last admin. Promote another Operator to admin first." Promote someone else to Admin before stepping this person down.
• Demoting an Admin to Data Contributor immediately narrows what they can see: no more decisions, benchmarks, financials, or IQ chat. It doesn't erase their history, just their forward access.

Removing access

Click Remove Access in the manage panel. You'll get a browser confirmation: "Remove [name] from the team? They will lose access to all company data." Confirm to complete the removal.

A few things happen on removal:

• Their row in core.operator_users is deleted outright, not just deactivated.
• Any personal email-forwarding addresses they had are cascaded out (marked removed) so old forwarding rules pointed at them stop being honored.
• The action is written to the account's audit trail.

Three things you cannot do:

• You cannot remove your own access. The action is blocked outright, remove yourself by asking another Admin to do it, or contact support.
• You cannot remove the current billing contact (Owner). You'll see: "This Operator is the billing contact. Set someone else as billing contact first." Reassign billing contact from the Membership & Billing page, then remove.
• You cannot remove the last Admin. Same guardrail as demoting: "You can't remove the last admin. Promote another Operator to admin first."

Data Contributors: a separate block, a separate deal

Below the Members list sits its own group, Data Contributors. The description line under the header reads: "Team members who feed data in. They see only their own work, are free, and never count against your memberships."

This block has three parts, each shown only when relevant:

• Current contributors, one row per person already in the role, with a count of any extra permissions you've granted them ("Contributing" alone, or "Contributing · 2 extra views").
• Pending contributor invites, showing the email and either "Invited" or "Expired," with a Cancel button.
• Bring your team in, a roster of people already on file (from your existing crew/roster data) who have an email address but no login yet. Each shows their name and, if known, their job role, with a one-click Invite to contribute button.

If nobody matches any of those states, you'll just see the Invite someone not on your roster button, which opens a small Full Name / Email form and a Send Invite button, same mechanics as the roster-based invite.

Extra permissions for a contributor

Click Permissions on any current contributor's row to expand a short explainer and a pair of toggles:

"Extra read-only views you can share. They stay a data contributor: no numbers, decisions, benchmarks, or settings. Full memberships (Premier) are the only way to give someone the full tool."

The two toggles are:

• See all data coming in, lets them see every email and document the whole company brings in, not just their own, read-only, no numbers.
• See all jobs, gives them a read-only list of every job so they can route an upload to the right one, instead of only the jobs assigned to them.

Both are strictly read-only widenings of what a contributor already does. There is no path from these toggles to decisions, benchmarks, financials, or IQ chat, that gap is what makes a paid Admin seat worth something.

Assigning a quick task

Click Assign task on a contributor's row to open a small form: Task (required, e.g. "Send last month's payroll summary"), Detail (optional), and Due Date. Click Assign to send it. This is a lightweight ad hoc assignment, not a project-management system, it's the fastest way to point a data contributor at something specific without walking them through the full tool.

Empty and loading states

• While the member list is loading, the page shows "Loading team…"
• While the Data Contributors block is loading, it shows "Loading…"
• A brand-new account with nobody invited yet just shows your own row in Members and an empty Data Contributors block with the invite options described above, there is no separate "no teammates yet" banner; the page is simply short.
• Every success or failure from an invite, role change, removal, or permission toggle shows as a single line of feedback text under the relevant section (green for success, red for error), for example "Role updated," "User removed," or "Invite sent to [email]."

Common questions

Why can't I demote or remove myself? Verinode blocks it structurally so an Admin can never accidentally lock themselves out. Ask a fellow Admin, or if you're the only one, promote a colleague first.

Why does the Admin role read differently for different people on my account? The label is tier-qualified: it reflects your account's current membership (Executive, Premier, Reserve), not the individual. Everyone with the Admin role on a Premier account sees "Premier Admin," for instance.

Can a Data Contributor ever see benchmarks or decisions? No. That boundary is enforced on the server, not just hidden in the UI, and it holds regardless of which extra permissions you grant them. The only way to give someone the decisions, benchmarks, and IQ chat experience is a full Admin seat.

What happens to a removed person's past work? Removal deletes their account-access row, it does not rewrite history. Documents they forwarded, tasks they completed, and jobs they touched keep their record; only their ability to sign back in and act going forward is gone.

Related reading

• Understanding your margin
• Benchmarks overview
• The decision workspace
• Forwarding documents
• Connecting your data