Inviting Team Members

GrantLink uses Clerk organization membership for user invitations and roles. There is no separate GrantLink team-invitation page: membership changes happen in Clerk's organization-management interface opened from the organization switcher.

Before You Start

Confirm that:

• You are working in the correct organization. GrantLink data is isolated by the active organization.
• You are an organization admin and Clerk shows membership-management controls for your role.
• You know whether the person should administer the organization, work in it, or only review it.
• The invitee will use the email address to which you send the invitation.

Choose a Role

GrantLink recognizes these current organization roles:

Role	GrantLink access
Admin (org:admin)	Read and write access plus admin-only controls, including organization-wide QuickBooks write permissions and accounting-firm coverage actions
Member (org:member)	Read and ordinary operational write access, including grants, funders, allocations, budgets, and chat; not admin-only organization controls
Viewer (org:viewer)	Read-only access to supported organization data; server-side writes are rejected

Viewer restrictions include more than disabled buttons. GrantLink rejects Viewer writes on the backend and redirects Viewers away from Settings, chat, new grant, new funder, import, and other blocked write routes. Settings and sync controls are hidden from the Viewer sidebar.

Least privilege: Use Viewer for a reviewer who should not change data, Member for operational work, and Admin only for people responsible for organization-wide access or configuration. GrantLink does not currently provide a grant-specific role, accountant-specific role, approval-only role, or custom permission set.

Invite a Team Member

1. In the GrantLink sidebar, select the current organization name at the top.
2. Open Clerk's organization-management option.
3. Open the member or invitation area shown by Clerk.
4. Enter the invitee's email address.
5. Select Admin, Member, or Viewer according to the access they need.
6. Send the invitation.

Clerk controls the exact labels, invitation email, expiration behavior, resend controls, and acceptance screens. If your Clerk interface uses different wording, follow the equivalent organization-membership action rather than looking for a GrantLink Settings page.

What Happens Next

• The invitation remains pending until the recipient accepts it through Clerk.
• After acceptance, the recipient signs in and selects the organization from the organization switcher.
• GrantLink reads the active Clerk organization and role from the authenticated session.
• Organization-scoped backend checks prevent that membership from granting access to another organization's records.

If the recipient signs in but sees no GrantLink data, first confirm that they accepted the invitation and selected the correct active organization. A personal account or membership in another organization does not provide access to this one.

Change or Remove Access

1. Open the organization switcher.
2. Return to Clerk organization management.
3. Find the member.
4. Use Clerk's available role action to change access, or remove the membership.
5. Ask the user to refresh or sign in again if their existing session still shows the previous role.

Removing a Clerk organization membership removes that person's organization access; it does not delete the organization's GrantLink records or erase activity attributed to that user. Review Settings > Activity log when you need the history of GrantLink changes.

Team Invitations Are Not Firm Coverage

Do not confuse a Clerk team invitation with an accounting-firm client invitation:

• A Clerk organization invitation makes a person a member of the organization and gives them a GrantLink role.
• An Accounting firm invite code under Settings > Accounting firm links a client organization to an agency plan for coverage and billing.

Firm coverage alone does not make an accountant a Clerk member of the client's organization. To open and work inside the client's data, the accountant must also have appropriate membership in that client organization. See Working with Your Accountant.

Security and Edge Cases

• Do not share one user account. Individual memberships preserve actor identity in the activity log.
• Remove departed users in Clerk; changing an internal responsibility note does not revoke access.
• A Viewer cannot be used as a “mostly read-only” user with one write exception. GrantLink currently treats the role as read-only.
• A Member can perform ordinary writes. Use Viewer instead if the recipient should only inspect data.
• Admin-only checks apply on the server even if a non-admin reaches an admin surface through an old link.
• GrantLink does not document or control Clerk's invitation expiration period in-product. Check the pending invitation in Clerk and resend or replace it there if necessary.
• Encourage multi-factor authentication and follow your organization's identity-provider and offboarding policies.