Add users and set what they can do

Adding someone. Open Admin, go to ⟦User Management⟧ under People, and invite them by email address. They get an invitation and set their own password, so you never handle it.

Deciding what they can do. Access is set by role rather than per person. Under Access, ⟦Role Access⟧ controls which pages and which capabilities each level of user gets — who can see invoices, who can delete records, who can mass-update data. Change the role and everyone at that level changes with it.

This is the answer to almost every "why can my colleague not see X" question: the page is switched off for their role. Check Role Access before assuming something is broken.

⟦Teams⟧ group people for assignment and reporting. Use them to reflect how the company actually works — by region, by desk — rather than mirroring the org chart for its own sake.

Removing someone. Deactivate the user rather than deleting them where you can. Their name stays readable on the records and activities they created, so the history still makes sense, while their access ends immediately.

Before removing anyone, reassign what they own. Customers and open opportunities with a departed owner quietly stop appearing in the "my records" views everyone actually works from, and nobody notices until the deal is cold.