Inviting teammates
Colleagues with an address at your company's email domain don't need an invite: they can register themselves and you approve them under Join requests. Invite people who use another address, such as Gmail or a contractor's domain.
- On the Team page, under Invite a teammate, enter their email and choose a role.
- Select Send invite, then Copy link next to the pending invite and send it to them yourself. BordersHub doesn't email invites.
- The invite stays under Pending invites until it's accepted or expires after 14 days.
Join requests
Your organization's email domain is taken from the address of the person who registered it (unless that's a public provider such as Gmail). Anyone who later registers with that domain appears under Join requests on the Team page, and a counter shows on the Team link in the sidebar.
- Choose their role and select Approve. They can sign in straight away. The role starts on Read-only, the safest choice.
- Select Reject to refuse. Their account is removed.
- Email addresses aren't verified, so approve only people you recognize.
- Approvals and rejections are recorded in the audit log.
Managing members
Admins use the Manage menu next to each member to:
- Change role.
- Reset MFA, when someone has lost their phone. They set it up again at their next sign-in.
- Create password reset link. Share it with them; it expires after 24 hours or once used.
- Remove from team. They lose access straight away. You can restore them later.
Removed members
Someone removed from the team keeps their account but can't sign in. They're listed under Removed members at the bottom of the Team page:
- Restore: choose their role and they can sign in again with their old password. Tick Password reset link to also get a link they can use to set a new one.
- Delete: removes the account for good, so the email address can be used to register again. Their past activity stays in the audit log.
Locked-out accounts are listed separately with an Unlock button. An organization always needs at least one admin.
Suspended by BordersHub
BordersHub can suspend a member's account. It then appears under Suspended by BordersHub on this page, with the date and the reason. The person can't sign in, and the account can't be changed from here (restored, unlocked, given a role, sent a reset link, removed or deleted) until BordersHub lifts the suspension. Select Ask BordersHub to lift it to raise a support ticket that's already filled in. See Account suspension.
Roles
| Role | What it can do |
|---|---|
| Admin | Everything: the trust profile, evidence, approvals and publishing, trust requests, team, settings, audit log, API tokens and the subscription. |
| Contributor | Edits the trust profile, uploads evidence and submits drafts for review. Can view Approvals. |
| Approver | Signs off, sends back and publishes versions. Views the workspace and evidence. |
| Governance | Signs off and publishes; requests, approves and revokes trust relationships; views partners' full profiles and evidence. |
| InfoSec | Views everything, including team and organization settings, and partners' full profiles and evidence. Can't change anything. |
| Risk | Views trust, compliance and network pages, including partners' full profiles and evidence. |
| Auditor | Views trust, compliance and network pages; can't open partners' full profiles or evidence. |
| Sales | Views network pages and partners' full profiles, without their evidence files. |
| Billing user | Manages the organization's subscription: subscribes, turns automatic renewal off and on, updates the payment method and downloads invoices. Also uses the Dashboard and support tickets and reports; nothing else. |
| Read-only | Views your own profile, evidence and requests; can't change anything or open partners' full profiles. |
Every role can use the Dashboard and open support tickets, except Read-only, which can view tickets only.
In Partners, Admin, Governance, Sales, InfoSec and Risk can name contacts and send and answer requests; Auditor and Read-only can view them; Contributor and Approver don't see Partners.