> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corepillar.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

> Add, invite, re-role, and remove people in an organization by editing four email boxes, one per role.

"Who can use ModelHub and AgentHub in this organization, and with which role."

User Management is the one screen for organization membership. Instead of a table with per-row buttons, it shows one text box per role. You edit the boxes like a list, then save, and AgentHub works out what changed.

**Who sees it:** admins (Owner or Admin) and super admins. AI Builders and Users have no Settings at all.

## The boxes

"One email per line. Move an email between boxes to change its role, add one to invite, or delete it from every box to remove that person. Changes apply when you save."

| Box | Role it grants | Help text | Who can edit it |
| - | - | - | - |
| **Super Admins** | Super Admin | "Everything, on ModelHub and AgentHub. Configured per domain by the platform — read-only here." | Nobody; always read-only |
| **Admins** | Admin (database role Admin; Owners are listed here too) | "ModelHub + AgentHub. Can create orgs and invite members." | Super admins only. Admins see "(read-only)" and "Only a super admin can change admins." |
| **AI Builders** | Editor | "ModelHub + AgentHub." | Admins and super admins |
| **Users** | Viewer | "ModelHub only." | Admins and super admins |

Each box lists current members plus pending invites. Notes in parentheses mark a line: `(owner)`, `(pending invite)`, and `(you)`. You can leave them in place; anything in parentheses is ignored when you save.

You can separate emails with new lines, spaces, commas, or semicolons. Emails are lowercased.

## Saving

**Save changes** and **Reset** are enabled once you have edited a box. **Reset** puts every box back to what was loaded.

When you select **Save changes**, AgentHub compares the boxes to the organization and applies the difference:

| You did | AgentHub does |
| - | - |
| Added a new email | Adds them directly if they already have an account, or creates an invite. The email must be approved for platform access. |
| Moved an email to another box | Changes the member's role, or re-issues a pending invite with the new role. |
| Removed an email from every box | Asks you to confirm, then removes the member or revokes the pending invite. |
| Left an email where it was | Nothing. |

If anything would be removed, a confirmation window appears first, listing those emails: "Remove this person?" or "Remove N people?". Select **Remove and save** to apply everything, or **Cancel** to go back and edit.

### Save summary

After saving, a **Save summary** panel lists each email that changed:

| Label | Example message |
| - | - |
| **Added** | "Added as AI Builder." |
| **Invited** | "Invited as User. Invite link: `https://<site>/invite/<token>`" |
| **Role updated** | "Now Admin." |
| **Removed** | "Removed from the organization." or "Pending invite revoked." |
| **Needs action** | "Needs platform access first — grant it in the Platform access tab, then save again." |
| **Error** | See the table below. |

If nothing changed, it says "No changes were needed." When a super admin's save has emails waiting on platform access, a tip follows: "Tip: approve those emails in the Platform access tab, then save again to send their invites."

<Warning>
  "Send their invites" means create them. AgentHub does not email invite links. Copy each link from the summary and send it yourself.
</Warning>

### Errors

| Message | Cause |
| - | - |
| Not a valid email address — skipped. | The line is not an email. |
| Listed in more than one box — left unchanged. | The same email appears in two boxes. |
| You can't change your own role. | You moved your own email. |
| You can't remove yourself — left unchanged. | You deleted your own email. |
| Only a super admin can add or change admins. | An admin tried to move someone into or out of Admins. |
| Only a super admin can add admins. | An admin tried to invite into Admins. |
| Only a super admin can remove admins. / Only a super admin can revoke admin invites. | An admin removed an admin. |
| This is the org's last Owner — can't be demoted. / can't be removed. | The organization must keep at least one Owner. |
| You do not have permission to manage users. | You lack `manage_members`. |
| Removing members needs the service-role key configured. | A server configuration problem; contact CorePillar. |

Changes for different emails are applied independently, so one error does not block the rest of the save.

## Examples

<Tabs>
  <Tab title="Invite three employees to ModelHub">
    Add to **Users**:

    ```text theme={null}
    priya@acme.com
    sam@acme.com, li@acme.com
    ```

    Save. Each email that is approved for platform access is added or invited. Send each invite link from the summary. Tell them to use [ModelHub](https://modelhub.corepillar.ai).
  </Tab>

  <Tab title="Promote a User to AI Builder">
    Cut the email from **Users**, paste it into **AI Builders**, and save. The summary shows "Role updated: Now AI Builder."
  </Tab>

  <Tab title="Remove someone">
    Delete their email from whichever box it is in and save. Confirm in the **Remove this person?** window.
  </Tab>
</Tabs>

## Related

* [Members and invites](/agenthub/settings/members) covers invite expiry, links, and acceptance.
* [Roles and permissions](/agenthub/settings/roles-and-permissions) explains what each box's role can do.
* [Platform access](/agenthub/settings/platform-access) is where super admins approve emails before they can be invited.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.