Manage members and roles

Members are the people who run your organization with you. Each member is a Coritan account with a role that decides what they can see and change in the organization's tabs, in the staff console and through the Organization API. Add a member when someone joins your team, and remove them when they leave.

• You need the owner or admin role to add, change or remove members. Every member can see the list; the others see the note Changes here need an owner or admin.
• Decide on a role. Organization roles and permissions says what each one can do.

1. In the dashboard, open the organization, then the Members tab.

2. Select Add member.

3. Enter their Email and, if you like, their Name.

4. Choose a Role. The description under the list says what the role can do.

5. Give them a way to sign in:

   • Leave Email an invitation ticked to email them a link to set their password, or
   • enter a Temporary password of at least 8 characters and share it with them yourself.

   A person who is new to Coritan needs one of the two. For someone who already has a Coritan account, leave Temporary password empty: they sign in with the password they have.

6. Under Storefront account, choose which customer account the member uses when they buy from your storefront:

   • Their own account, by email: the customer account with their email, created the first time they sign in to the staff console.
   • An existing customer account: choose it under Customer account.
   • Create a customer account now, with their email.
   • No storefront account: they only use the staff console.

7. Select Add member.

The dashboard confirms who was added and with which role. An invited member gets an email with a link to set their password on your storefront domain, at /staff/reset-password. Members sign in to the organization's tabs on coritan.com, and to the staff console with the same email and password.

1. Open the Members tab.
2. Choose the new role in the member's Role column.

The change applies at once, and it signs the member out of every open staff console session, so their next session carries the new role. The owner's role cannot be changed here.

1. In the Storefront account column, select Manage next to the member.
2. Under Change it to, choose Attach an existing customer and pick the account, or Create a new customer account.
3. Select Attach account or Create and attach.

To make the member console-only, select Detach account instead. The customer account itself stays as it is, with its services and invoices.

1. Select the bin icon at the end of the member's row.
2. Type remove to confirm, then select Remove member.

The member loses access to the organization at once and every staff console session they have ends. Their Coritan account and their storefront customer account, if they have one, are kept. The owner cannot be removed: ownership moves only when Coritan support transfers it.

User is already a member

That email already belongs to a member of this organization. Change their role instead.

Set a temporary password or send an invite email

The email is new to Coritan, so the member needs a way to sign in. Tick Email an invitation or enter a Temporary password.

That email belongs to a suspended or closed platform account

The Coritan account with that email cannot sign in, so it cannot become a member.

Set a password from the invite email before signing in

The member tried to sign in to the staff console before following the invitation link. Ask them to open the email, or add a temporary password for them.

• Organization roles and permissions
• Manage the staff team and console settings
• Read the organization audit log

List the members with any member's token. Each entry has the member's id, user_id, role, email, names, joined_at, customer_link_mode and linked_customer_id.

curl https://api.coritan.com/api/v1/orgs/acme/members \
  -H "Authorization: Bearer $CORITAN_TOKEN"

Add a member as an owner or admin. The body takes email, role (support_tier1 when you leave it out), name, password (at least 8 characters), send_invite_email (false when you leave it out), customer_link (auto, existing, create or none) and customer_id for existing.

curl -X POST https://api.coritan.com/api/v1/orgs/acme/members \
  -H "Authorization: Bearer $CORITAN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"email": "alex@example.com", "name": "Alex Example", "role": "support_tier2", "send_invite_email": true, "customer_link": "auto"}'

The answer is 201 with the new member. role takes admin, billing, support_tier3, support_tier2, support_tier1 or readonly; owner answers 400 Use transfer-ownership to assign owner.

Change a role with PATCH /api/v1/orgs/acme/members/{member_id} and a body of {"role": "billing"}, and remove a member with DELETE /api/v1/orgs/acme/members/{member_id}. Both answer 400 for the owner.

Read a member's storefront account with GET /api/v1/orgs/acme/members/{member_id}/customer-link. Attach one with PUT on the same path and a body of {"mode": "existing", "customer_id": 812}, or {"mode": "create"} to make one with the member's email. DELETE on the path makes the member console-only.