Skip to main content

Users

Users are individuals associated with your Onehouse account. Each user is uniquely identified by their email address.

Invite users​

To invite new users to a Onehouse project, you must be a project admin.

  1. Open your project.
  2. Navigate to Settings → Users & Access.
  3. Click the Invite User button.
  4. Enter the user’s email address and role.
  5. The user will receive an email invitation. They must accept the invitation to access the project.
tip

New users must be invited to a project — this will also add them to the parent account automatically. You cannot invite users directly to an account without assigning them to a project.

Inviting people outside your claimed domains​

Account admins can control whether members may invite addresses outside the account's claimed domains.

The account-wide default is set under Account Settings → Account Details:

  • On — members can invite any email address.
  • Off — members can only invite addresses on your claimed domains.

Individual members can be given their own setting under Users & Access, which overrides the account default for that person:

SettingEffect
InheritFollows the account default.
AllowThis member can invite any address, even when the account default is Off.
DenyThis member can only invite addresses on your claimed domains, even when the account default is On.
note

Account admins can always invite anyone, so their rows have no control. Resetting a member to Inherit is not reversible by changing the account default back — anyone who had Allow loses that access.

Syncing users from an identity provider​

You can sync users from identity providers such as Microsoft Entra ID (formerly Azure Active Directory) or Okta using SCIM.

To configure SCIM user syncing, see SCIM Identity Sync.

How users can join an account​

Users can become part of your Onehouse account in the following ways:

  • Manual invite to a project – Adds the user to the associated account automatically.
  • Added to a synced group via SCIM – Users added to synced groups in your identity provider will be added to the Onehouse account.
  • Sign up from a claimed domain – If your account has claimed their email domain or sub-domain and Auto-join is on for it, users can join by signing up with an address under that domain. Where they land is set by that domain's placement — the system default is Account Reader with no project access. Auto-join is off on a newly claimed domain until an admin turns it on. See Domains.

Troubleshooting invites​

Clicking the invite email lands on a login page instead of auto-joining the project​

This is almost always a browser session mismatch. The invite link assumes you are already logged into the Onehouse account associated with the invited email; if your browser is logged into a different identity (or a different Google account), the join handshake breaks and Onehouse falls back to the login page.

Fix:

  • Open the invite link in an incognito / private window, then log in with the invited email.
  • Or, sign out of all Google/Onehouse sessions in your normal browser before clicking the link.

A removed user is greyed out when re-added​

When you re-invite a user who was previously removed, the UI may show the row in a greyed-out state due to stale membership cache. Refresh the page; if the user is still greyed out, remove them again and re-add. The user can join normally once the cache catches up.

A new user signed up but sees nothing​

The user joined the account (typically via claimed-domain sign-up) but has not been granted any project membership or resource roles. See Project membership vs. resource access — a project admin needs to invite them to a project and grant the appropriate roles.