> ## Documentation Index
> Fetch the complete documentation index at: https://ownpay.org/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> OwnPay is licensed under AGPL-3.0 and is completely free - no licensing fees.
> Production docs URL: https://ownpay.org/docs - append .md to any page URL for clean markdown.
> OwnPay requires PHP 8.3+, MySQL/MariaDB, and Redis.
> MCP server available at https://ownpay.org/docs/mcp for programmatic documentation queries.
> Use root-relative links (e.g. /quickstart) for internal navigation - do NOT include /docs prefix.
> Plugin development: consult /developer/plugins/ pages for correct interfaces and manifests.
> Canonical locations: API auth = /api/authentication, webhook verification = /api/webhooks, rate limits = /resources/rate-limiting, transaction statuses = /fundamentals/payment-flow.
> The documentation uses the Diataxis framework: Tutorials (learning), How-to (tasks), Reference (lookup), Explanation (understanding).

# Invite and manage staff

> How to invite team members, assign them to brands and roles, and manage their accounts in the OwnPay admin dashboard.

Staff members are the people who log in to your OwnPay admin dashboard to manage payments, brands, and settings. Each staff member has their own login credentials and can be scoped to specific brands.

## Super admin concept

The first account created during installation is the **super admin**. This account has unrestricted access to every brand, every setting, and every role. You cannot delete the super admin. Only the super admin can create other staff members and manage roles.

## Invite a staff member

1. Log in to the admin dashboard as the super admin.
2. Go to **People** → **Staff**.
3. Click **+ Add Staff**.
4. Enter the staff member’s **name** and **email address**.
5. Select a **role** (see [Roles](/docs/people/roles) for the full list).
6. Choose the **brands** this staff member can access.
7. Click **Create**.

The system sends an invitation email to the staff member. They click the link, set their own password, and log in.

<Note>
  If your server does not have SMTP configured, the invitation email will not be sent. In that case, the super admin must communicate the login URL and reset the password manually from the staff member’s edit page.
</Note>

## Staff accepts the invitation

1. The staff member opens the email and clicks the invitation link.
2. They set a password (minimum 8 characters).
3. They are redirected to the admin dashboard.
4. Their initial view is limited to the brands and permissions assigned to their role.

## Manage staff members

From the **People** → **Staff** page, you can:

* **Edit** - change name, email, role, or brand assignments.
* **Deactivate** - temporarily disable access without deleting the account. Deactivated staff cannot log in.
* **Delete** - permanently remove the staff account and its session data.
* **Reset password** - force a password reset so the staff member sets a new password on next login.

## Brand scoping

Staff members only see brands they are assigned to. When a staff member logs in:

1. The system loads their brand list.
2. They can switch between assigned brands using the brand selector in the top navigation.
3. If they have only one brand, the dashboard loads that brand’s data directly.
4. Attempting to access an unassigned brand returns a **403 Forbidden** error.

<Warning>
  Never share your super admin password with other team members. Always create a separate staff account for each person so you maintain an audit trail of who did what.
</Warning>

## Related Pages

* [Roles](/docs/people/roles) - built-in roles and permission matrix
* [Login and authentication](/docs/security/login) - how admin authentication works
* [Two-factor authentication](/docs/security/two-factor) - secure staff accounts with 2FA
* [Audit log](/docs/reports/audit-log) - track actions taken by staff members
* [Brands](/docs/people/brands) - create and configure brands to assign staff to


## Related topics

- [Create and manage brands](/docs/people/brands.md)
- [Roles and permissions](/docs/people/roles.md)
- [Quickstart - Accept Your First Payment in 5 Minutes](/docs/quickstart.md)
- [Languages](/docs/system/languages.md)
- [Brands - Multi-Tenant Merchant Isolation](/docs/fundamentals/brands.md)
