HoneyHive lets you invite members at three levels of your organization hierarchy: organization, workspace, and project. Each level has its own invite flow accessible via Settings > Members at that scope.
Organization invites
Org Admins can invite new users to the organization by email.
- Go to Settings > Organization > Members
- Click Invite members
- Enter the user’s email address
Invited users receive the Org Member role by default when they sign in.
Users whose email domain matches your organization’s verified domain are added automatically when they first log in, no manual invite required.
Workspace and project invites
Workspace Admins and Project Admins can add members to their scope.
- Go to Settings > Members at the workspace or project level
- Click Invite members
- Select from users already in the organization, or enter an email address to invite someone new
When you invite a new user by email at the workspace or project level, the system automatically creates the necessary organization-level membership for them.
Automatic provisioning via SSO groups
If your deployment uses SAML SSO with group claims, user memberships and roles can be managed entirely from your identity provider — no manual invites required. When a user signs in, HoneyHive reads their IdP group membership and automatically provisions access to the appropriate data planes, workspaces, and projects.
Roles are re-synced on every sign-in, so removing a group in your IdP removes the corresponding access on the user’s next login.
See SSO group-based provisioning for details on how this works.
Adjusting roles after invite
After a member is added, admins can change their roles at any time via the edit icon next to the member’s name in Settings > Members. See Roles for the full list of roles and permissions at each level. 
