Managing users

The Users page is the single place to provision and deprovision people. Working access spans three systems — sign-in identity (Clerk), app roles, and the iOS beta (TestFlight) — and one action here updates all of them, so nobody ends up half-created with access that silently doesn't work.

Add a user

1. Open Users → Add user.
2. Enter their phone number (required — sign-in is by SMS code), plus their name and email.
3. Pick their role and scope (org / business unit / team). See Roles & permissions.
4. Create.

Behind the scenes this creates their sign-in identity, grants the role, and — on the beta — seats them in TestFlight so they can install the app. Status badges on each row show how far that got:

• Identity — Clerk linked once their sign-in identity exists.
• TestFlight — Active once they're seated in the beta group (external groups also email the invite automatically).

NOTE

There is no self-serve signup. Anyone not provisioned here can't get in — that's by design for evidence-grade work.

Deactivate a user

Deactivate removes their in-org roles, blocks sign-in, and removes them from TestFlight in one step. Their captured work and audit history remain intact and attributed.

If something partially fails

Upstream systems are best-effort: if Clerk or TestFlight can't be reached, the user is still created/updated here and the failure appears as a toast. Every attempt — including exactly what each system said — is recorded in the audit log, so you can always reconstruct what happened.

Next: Inviting people & roles for per-assignment collaborators and observers.