> ## Documentation Index
> Fetch the complete documentation index at: https://kb.mspprocess.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Team and permissions

> Invite your team to Studio, choose each person's role, group your approvers, and remove people safely.

Your team signs in to Studio and Triggr Core with one account; members, roles and user groups are shared by both apps.

<video controls preload="none" playsInline poster="/images/videos/studio-team.jpg" src="https://mintcdn.com/triggr/GxrCQFDFNLmEMyJ1/images/videos/studio-team.mp4?fit=max&auto=format&n=GxrCQFDFNLmEMyJ1&q=85&s=fe2d27e54ef556e856ea52dd30e971fc" />

Your team and permissions: invitations, roles, a group of approvers, and removing someone safely (1:29).

## Invite your team

**1. Open Members**

Click your organisation's name at the top right, then **Manage > Members**.

![The Organization dialog's Members tab with Members 4, Invitations 1 and Requests 0 tabs, a Search box, an Invite button, and rows for Alex Morgan as Admin, Sam Taylor as Approver, and Priya Shah and Chris Lee as Member.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/members.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=07484857cd30caff3cae293a95ac4aaf)

**2. Send invitations**

Click **Invite**, enter email addresses separated by spaces or commas, choose the Role and click **Send invitations**.

![The Invite new members form with jordan.blake@yourmsp.com entered, the Role list open on Approver, Admin and Member, and Cancel and Send invitations buttons.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/invite-members.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=dc2d04a5033d013ce756e205bc5b8741)

**3. Let them accept**

Each person follows the emailed link, then signs in at [app.triggr-app.com](https://app.triggr-app.com).

To change someone's role later, pick it from the Role list on their row.

## Roles

Studio has three roles. You can't add your own or change what a role includes.

| Role | Can see | Can change |
| - | - | - |
| Admin | Everything | Everything, including Integrations, Settings, members and roles |
| Approver | Clients, Forms and submissions, Workflows and runs, Internal Apps, On-Prem and Reporting | Approvals and manual steps |
| Member | Internal Apps and the Dashboard | Approvals and manual steps |

Whatever their role, anyone can answer an approval sent to their email address or to a [user group](#group-your-approvers) they're in, and complete tasks on Manual Steps.

> [!TIP]
>
> Admin for the people who build, Approver for engineers who follow requests and runs, Member for people who only use your internal apps and approve.

## Group your approvers

A user group lets anyone in it answer an approval, so requests don't wait for one person. Find them in **Settings > User Groups**.

**1. Create a group**

Click **New Group**, enter the Name and Description, and click **Create Group**.

![The Create New User Group dialog with Name Service Desk and Description First-line engineers who approve new starter and leaver requests, and Cancel and Create Group buttons.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/new-user-group.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=512b56f48b045f708ad85eea6708f4df)

**2. Add people**

Click Members on the group's row, then **Add Member**, point to a person and click **Add**. The dialog closes after each one, so click Add Member again for the next.

![The Add Member dialog with a Search users box and Chris Lee, Jordan Blake and Morgan Reid listed, with an Add button showing on Chris Lee's row.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/user-group-add-member.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=d4e2610c35b2eafac1e5f9a814dc631b)

![The Service Desk group page with Refresh, Edit and Delete buttons, a Group Information card showing 3 members, and a Members card listing Alex Morgan, Sam Taylor and Priya Shah, each with Remove, and an Add Member button.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/user-group-members.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=6d58aab00f12a0bc2947e3dfe351bc7d)

**3. Send approvals to it**

In a workflow, set a Human In The Loop or Approval With Logging step's **Approval Type** to Group and choose the User Group.

![The Human In The Loop step panel with Approval Type Group, User Group Service Desk, a Subject and Body built from ctx.params templates, and Response Type Approval.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/group-approval-step.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=7d43ca94fc88ec783be55368284ce12a)

Group approvals don't send an email: members find them on Approvals, and the first answer counts. See [Approvals and manual steps](https://kb.mspprocess.com/studio/workflows/approvals-and-manual-steps.md).

## Remove someone

**1. Take them out of your user groups**

Open each group in **Settings > User Groups** and click **Remove** on their row. Do this first: removing someone from the organisation leaves them in every group, listed as Unknown.

**2. Remove them from the organisation**

On Members, click … on their row, then **Remove member**. They lose access to Studio and Triggr Core at once.

![The Members table with the actions menu open on Chris Lee's row, showing Remove member.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/remove-member.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=99a5a31441539673d0e20a2df30e65d0)

**3. Revoke their MCP tokens**

Removing someone doesn't stop their tokens. Go to **Settings > MCP**, click **Revoke** on each one, then **Revoke Token**; the list doesn't show owners, so name tokens after the person who uses them.

![The MCP Access Tokens page listing Priya Shah – Claude Code and Chris Lee – Cursor as Active with Revoke buttons, and Sam Taylor – Codex as Revoked.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/mcp-tokens-revoke.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=af80f7baf32756e19ca4e5885c915b5c)

**4. Tidy up**

Revoke any API Keys they knew (keys belong to the organisation, not a person).

## Partner Access

When a portal provider that partners with Triggr asks to embed your forms, the request appears in Settings > Partner Access (admins only). Click **Approve** or **Deny**: approving lets the partner show your Microsoft-authenticated forms in its own portal and sign your clients' users in, for every client you manage. Revoke on an Active row stops that at once.

![The Partner Access page explaining that approved partners can embed your Microsoft-authenticated forms in their own portals, with a table showing Example Portal Co as Active, requested Sep 5, 2026 and approved Sep 16, 2026, with a Revoke button.](https://mintcdn.com/triggr/_d7ojda9vf8IHE31/images/studio/clients/partner-access.png?fit=max\&auto=format\&n=_d7ojda9vf8IHE31\&q=85\&s=4f9606f383ec35576acbe5eff86fe89a)

## FAQ

> [accordion] A teammate can't see Clients, Forms, Workflows, Integrations or Settings
>
> Member sees only Internal Apps and the Dashboard; Approver adds Clients, Forms and Workflows; Integrations, Settings and the New buttons need Admin.

> [accordion] A group member can't find an approval
>
> Group approvals don't email anyone. Check they're in the group the step names, then look on Approvals.

> [accordion] I denied or revoked a partner by mistake
>
> A denied or revoked request stays revoked, even if the partner asks again. Contact Triggr support.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.