Invite your team & manage roles

Access in Exabloom has two layers, and almost everything else makes sense once you see them. Your Brand is your top-level account. Inside it live one or more Workspaces — typically an HQ plus a Workspace per outlet, client, or business unit, each often with its own WhatsApp number.

That nesting gives every teammate two kinds of role:

• Brand role — account-wide powers: managing Workspaces, people, roles, and Brand-level features. One per person.
• Workspace role — what they can do inside a single Workspace: inbox, contacts, leads, workflows. Set separately for each Workspace you add them to.

Managing people is a Brand-admin job. Out of the box:

• Owners and Admins can invite teammates, edit their access, and remove them.
• Only Owners can set or change someone’s Brand role. For everyone else that dropdown is locked with a padlock and the note “Only Owners can change agency roles.”
• Members have no people-management powers at all.

Everything in this guide happens on one screen. It’s three clicks from anywhere in the app:

One thing that trips people up: the brand logo in the corner isn’t just a logo, it’s the switcher. It’s how you move between Workspaces day to day, and it’s also the only door into the Admin Dashboard.

This is the path for someone who isn’t in your Brand yet. If they already appear in the Users table, skip to Give an existing teammate access below — inviting them a second time isn’t how you widen their access.

Hit Add user to open the Invite user drawer. Only the email is required — everything else has a sensible default you can leave alone.

The fields, in order:

1. 1Full name — optional. If you skip it, their email stands in until they set a name.
2. 2Email — required. This is where the invite goes.
3. 3Brand role — defaults to Member. Covered next.
4. 4Workspace access — tick each Workspace to grant, then tune its role, contact visibility and pipelines. Untouched, every Workspace is No access.

Most invites need almost none of that. Here’s the fast path versus the parts you can save for when you actually need them:

When you’re happy, hit Send invitation. We’ll walk through what that fires off in Invites, reminders & expiry below.

Opening a second outlet, or someone’s covering another branch this month? You don’t invite them again. They’re already in your Brand and already using their seat — you just widen what that one account reaches.

Same page, different door. Instead of Add user, find them in the Users table and click their row — the whole row is clickable, or use the Edit user icon on the right. The same drawer reopens, this time headed Edit user, holding everything they have today.

Scroll to Workspace access. Every Workspace in your Brand is listed — the ones they have are ticked and expanded, the rest read No access. Tick the one you’re granting, and it opens up with its three dials ready:

• Role lands on Admin — full run of that Workspace, nothing outside it. Leave it unless you want to hold something back.
• Contact visibility lands on All contacts.
• Pipeline access lands on All pipelines.

Then hit Save changes — not “Send invitation”, which only exists for brand-new people.

The reverse works the same way: to take a Workspace away, untick it in this drawer and save. They keep every other Workspace, their seat, and their login — see Edit access & remove people below for the fuller picture.

The Brand role answers one question: how much of the account can this person run? There are three built-in roles, from most to least powerful:

For each Workspace you tick, you set three independent things. They don’t follow each other — this is the part people most often get wrong, so it’s worth a careful read.

1 · Workspace role

What they can do inside this Workspace. Three built-ins:

2 · Contact visibility

Whose contacts they see in this Workspace — separate from what they can do. Three choices:

• All contacts — sees every contact in the Workspace.
• Assigned + unassigned — their own contacts, plus anything not yet assigned to anyone.
• Assigned only — only the contacts assigned to them.

Picking a role pre-fills a recommended default (you’ll see “Using the recommended default for Agent”), but you’re free to override it.

3 · Pipeline access

Which lead pipelines in this Workspace they can work. There are two options, and the simple one is the right one most of the time:

• All pipelines — the simple choice, and what the app already selects the moment you tick a Workspace. They can work every pipeline in it, including any you build later. Leave it alone unless you have a reason not to.
• Specific pipelines — tick only the pipelines they should reach. Use this when you genuinely need to control which leads they can get to: a rep who should only touch New Patients and never Recall / Follow-up, say, or a partner working a single campaign.

Like contact visibility, this is independent of the role — picking a smaller role won’t narrow their pipelines for you.

Sending an invitation emails the teammate a link to set up their login. Until they accept, their row shows Pending invite with how long ago you sent it and when it lapses. Once they verify, they flip to Active and their access is live immediately.

The status pill tells you exactly where each person stands:

The Edit user drawer you met above isn’t only for adding Workspaces — it’s where every later change happens. Three rules govern it:

• Email is locked. You can change the name, roles, Workspaces, visibility and pipelines, but not the email an invite was tied to. If someone’s address changes, remove them and invite the new one.
• Brand role is Owner-only. If you’re not an Owner, that dropdown is greyed out behind a padlock. Everything below it — Workspaces, roles, visibility, pipelines — you can still edit.
• To remove someone from one Workspace, just untick it here and save — there’s no separate button. They keep their access to every other Workspace.

Removing someone from the whole Brand is a bigger, deliberate step. The action opens a confirmation that spells out the consequences and asks you to type their email to be sure.

Four configurations that cover most teams. Each is just the dials above, set together — adapt, don’t copy blindly.

• Visibility and pipelines don’t follow the role. Set them on purpose — a “small” role won’t automatically narrow what someone sees or which pipelines they touch.
• Specific pipelines don’t pick up new ones. A pipeline built after you saved their access stays invisible to them until you tick it. All pipelines — the simple setting — keeps up on its own.
• Never re-invite someone who’s already on the team. To give them another Workspace, click their row, tick it, and Save changes — no email goes out and access is live immediately.
• Invites expire in 14 days. The link stops working after that — use Resend invite to send a fresh one and reset the clock.
• Only Owners change Brand roles, and you can’t remove the last Owner or yourself. Promote a second Owner before you ever need one.
• Removing from the Brand unassigns their work. Their contacts and leads go unassigned and pending chats return to the inbox; workflows they built and the audit log stay put. Removing from a single Workspace just unticks it.
• One seat covers every Workspace. Adding a teammate to more Workspaces never costs another seat.
• A couple of old labels linger. The screen now says Brand and Workspace nearly everywhere, but the Users page still describes itself as “your agency and its organisations” and the Owner lock mentions “agency roles”. Same two layers, older words — agency means your Brand, organisation means a Workspace.