GrantLink uses Clerk, its sign-in provider, to manage organization members, invitations, and roles. GrantLink has no separate team invitation page. You invite and manage members in Clerk's organization management screens, which you open from the organization switcher.

Before you start

Confirm the following:

You are working in the correct organization. Each organization's GrantLink data is separate.
You are an organization Admin, and Clerk shows you the member management controls.
You know whether the person should manage the organization, do day-to-day work, or only review data.
The person will sign in with the email address you send the invitation to.

Choose a role

GrantLink recognizes these organization roles:

Role	Access in GrantLink
Admin (`org:admin`)	Everything a Member can do, plus Admin-only settings such as the QuickBooks write policy, QuickBooks mapping, grant QuickBooks links, and accounting firm connections
Member (`org:member`)	Read access and day-to-day changes, such as grants, funders, allocations, budgets, and chat
Viewer (`org:viewer`)	Read-only access to organization data

Viewer restrictions go beyond hidden buttons. GrantLink rejects changes from Viewers on the server. It also sends Viewers away from Settings, chat, reporting, and the pages for creating or importing grants, funders, and initiatives. The Viewer sidebar doesn't show Settings or the sync status.

Least access: Give the Viewer role to reviewers who shouldn't change data, the Member role to people who do day-to-day work, and the Admin role only to people who manage access or organization settings. GrantLink doesn't offer roles limited to one grant, accountant roles, approval-only roles, or custom permission sets.

Invite a team member

In the GrantLink sidebar, select the organization name at the top to open the organization switcher.
Open Clerk's option for managing the organization.
Go to the members or invitations area.
Enter the person's email address.
Choose Admin, Member, or Viewer based on the access they need.
Send the invitation.

Clerk controls the exact labels, the invitation email, when invitations expire, and the resend and acceptance screens. If Clerk uses different wording, look for the equivalent organization membership action in Clerk.

What happens next

The invitation stays pending until the person accepts it in Clerk.
After accepting, the person signs in and selects the organization in the organization switcher.
GrantLink reads the person's active organization and role from their sign-in session.
Server checks for each organization stop the membership from giving access to another organization's records.

If the person signs in but sees no GrantLink data, confirm that they accepted the invitation and selected the correct organization. A personal account or a membership in another organization doesn't give access to this one.

Change or remove access

Open the organization switcher.
Open Clerk's organization management again.
Find the member.
Change their role, or remove their membership.
If the person's session still shows the old role, ask them to refresh the page or sign in again.

Removing a membership in Clerk removes the person's access to the organization. It doesn't delete the organization's GrantLink records or the activity recorded under that person. Use Settings > Activity log to see the history of changes in GrantLink.

Team invitations and accounting firm connections are different

A Clerk team invitation and an accounting firm invite code do different things:

A Clerk organization invitation makes a person a member of the organization with a GrantLink role.
An Invite code on the Settings > Accounting firm page links a client organization to an accounting firm's agency plan for coverage and billing.

An accounting firm connection doesn't make the accountant a member of the client organization. To open and work in the client's data, the accountant also needs a membership in that client organization. See Working with Your Accountant.

Security and edge cases

Don't share one user account. Separate memberships keep each person's name on the changes they make.
Remove people who leave in Clerk. Changing a note about someone's responsibilities doesn't remove their access.
The Viewer role can't make any changes, so you can't give a Viewer one exception.
A Member can make day-to-day changes. Use the Viewer role if the person should only look at data.
Admin-only checks run on the server, even if a non-Admin opens an Admin page through an old link.
GrantLink doesn't control when Clerk invitations expire. Check the pending invitation in Clerk, and resend or replace it there if needed.
Encourage multi-factor authentication, and follow your organization's sign-in and offboarding policies.