> ## Documentation Index > Fetch the complete documentation index at: https://docs.callers.ai/llms.txt > Use this file to discover all available pages before exploring further. # Team and permissions > Invite teammates to Callers, assign Admin or Read Only roles, limit what each member can see, and enforce multi-factor authentication. Invite your teammates to work on agents together, and control what each person can see and change. Every member has a **role** (Admin or Read Only) and a set of **access** toggles that can limit their access further, for example by hiding contact phone numbers or call recordings. ## Open team settings Click your name in the sidebar, choose **Settings**, then open the **Team** section. The **Team** section is visible to Admins only. The members table shows each member's **Email**, **Role**, **Access** (**Full** or **Limited**), and **Status**: | Status | Meaning | | - | - | | **Active** | The member has signed in. | | **Pending** | The invitation was sent and the member hasn't signed in yet. | | **Invitation link expired** | The invitation or reset link is more than 24 hours old. Generate a new one with **Reset Password**. | ![Settings window with Team selected in the left navigation, an Invite button, and a members table with Email, Role, Access, and Status columns showing Active, Pending, and Link expired statuses](https://mintcdn.com/voxiaai/UGuY0UNIphM-6pUX/images/documentation/account/settings-team.png?fit=max\&auto=format\&n=UGuY0UNIphM-6pUX\&q=85\&s=750be28a55ee8fabf81eb4ad7cd30117) Settings → Team: each member's role, access, and status, with the Invite button. ## Invite a member **1. Open the invite dialog** In **Settings → Team**, click **Invite**. **2. Enter the email address** Type the teammate's work email in the **Email** field. **3. Choose a role and access** Pick a role from the role menu (**Admin** or **Read Only**). Open the **Full** / **Limited** menu next to it to adjust access toggles before you send the invite. See [Member access](#member-access). **4. Send the invitation** Click **Invite**. On app.callers.ai, Callers emails the invitation. If you use a [custom domain](https://docs.callers.ai/documentation/agencies/white-label.md), Callers shows an invitation link instead. Click **Copy** and send the link to your teammate yourself. ![Invite dialog with an Email field, a Read Only role menu, and a Full access menu expanded to show toggles for Access contact phone numbers, View transcripts and recordings, Manage users, Manage account settings, View Analytics, Manage API keys, and Export contacts or calls](https://mintcdn.com/voxiaai/UGuY0UNIphM-6pUX/images/documentation/account/invite-member-dialog.png?fit=max\&auto=format\&n=UGuY0UNIphM-6pUX\&q=85\&s=77ee43d3ab2b402ec9b49cd0b99e3465) The invite dialog with the role menu and the access menu open. > [!NOTE] > > Invitation links expire after 24 hours. If a teammate misses the window, open the member's menu and choose **Reset Password** to create a new link. If the person is already a member of the parent account (for agencies), Callers tells you they already have a role there. Members of a parent account can already reach its subaccounts, so you don't need to invite them again. See [Managing subaccounts](https://docs.callers.ai/documentation/agencies/managing-subaccounts.md). ## Roles | Role | What they can do | | - | - | | **Admin** | Full access to the account: build and launch agents, manage contacts and phone numbers, invite and remove members, change account settings, and create API keys (unless limited by access toggles). | | **Read Only** | View agents, contacts, and results without changing them. Read Only members can't manage users, account settings, or API keys, export data, or view Analytics. | To change a member's role, click the role in their row and pick a new one. You can't change your own role. ## Member access Access toggles limit what a member can see or do, on top of their role. New members get full access by default. When at least one toggle is off, the **Access** column shows **Limited**. To change access, click **Full** or **Limited** in the member's row and turn toggles on or off. Changes save immediately. | Toggle | When turned off | Applies to | | - | - | - | | **Access contact phone numbers** | Contact phone numbers are masked for this member. | Admin and Read Only | | **View transcripts and recordings** | Transcripts and call recordings are hidden. The member sees "Content Hidden" where they would be. | Admin and Read Only | | **Manage users** | The member can't invite, edit, or remove members. | Admin only | | **Manage account settings** | Account settings such as the organization name, retention period, support access, and MFA become read-only. | Admin only | | **View Analytics** | The [**Analytics**](https://docs.callers.ai/documentation/using-callers/analytics.md) page is hidden. | Admin only | | **Manage API keys** | The **API Keys** section is hidden. | Admin only | | **Export contacts or calls** | The member can't [export contacts or calls](https://docs.callers.ai/documentation/using-callers/agent-insights.md#export) to CSV. | Admin only | > [!NOTE] > > Toggles marked "Admin only" stay off and can't be changed for Read Only members, because the Read Only role doesn't include those permissions. ## Remove a member Hover over the member's row, open the **⋯** menu, and choose **Delete**. Confirm with **Yes, Delete**. This can't be undone. To give the person access again, invite them again. ## Reset a member's password Members who signed up on app.callers.ai can reset their own password with **Forgot password?** on the login page. Callers emails them a reset link. On a [custom domain](https://docs.callers.ai/documentation/agencies/white-label.md), members can't reset their own password. The login page asks them to contact their Admin. To reset a password as an Admin: **1. Open the member menu** In **Settings → Team**, hover over the member and open the **⋯** menu. **2. Generate the link** Choose **Reset Password**, then click **Generate Reset Password link**. **3. Share the link** On app.callers.ai, Callers emails the link to the member. On a custom domain, click **Copy** and send the link yourself. The link expires after 24 hours. Passwords must be at least 8 characters. ## Multi-factor authentication (MFA) Require every member of your organization to confirm their identity with a 6-digit code from an authenticator app (TOTP), such as Google Authenticator, each time they log in. ### Turn on MFA **1. Open General settings** Click your name, choose **Settings**, and open **General**. **2. Enable the toggle** Turn on **Multi-Factor Authentication (MFA)**. **3. Members enroll at their next login** At their next login, each member sees **Set up two-factor authentication**. They scan the QR code with an authenticator app, or enter the **Manual entry key**, then type the 6-digit code and click **Verify & continue**. After that, each login asks for a code. > [!NOTE] > > If you don't see the MFA setting, it isn't available on your account yet. Contact [support@callers.ai](mailto:support@callers.ai). Members who can't **Manage account settings** see the toggle but can't change it. ### Reset a member's MFA If a member loses their phone or authenticator app, open their **⋯** menu in **Settings → Team** and choose **Reset MFA**. They set up MFA again the next time they log in. **Reset MFA** appears only when MFA is turned on for the organization. ## Accounts that use SSO If your organization signs in with [single sign-on](https://docs.callers.ai/documentation/using-callers/sso-login.md), your identity provider manages members. In **Settings → Team** you can still change roles and access, but you can't invite members, reset passwords, reset MFA, or delete members from Callers. ## Troubleshooting > **I don't see the Team section** > > Only Admins see **Team**. Ask an Admin to change your role. > **The Invite button is missing** > > Your **Manage users** access may be off, or your organization signs in with SSO. Ask another Admin to check your access. If no Admin can invite members, member management may be turned off for the account. Contact [support@callers.ai](mailto:support@callers.ai). > **A teammate says their invitation link doesn't work** > > Invitation links expire after 24 hours, and the member's status shows **Invitation link expired**. Open their **⋯** menu, choose **Reset Password**, and send them the new link. > **A member sees 'Content Hidden' instead of a transcript** > > Their **View transcripts and recordings** access is off. Turn it on in the member's access menu if they need it. ## Related > **[Single sign-on (SSO)](https://docs.callers.ai/documentation/using-callers/sso-login.md)** > > Let members log in with your identity provider. > **[Security and privacy](https://docs.callers.ai/documentation/account/security-and-privacy.md)** > > Data retention, sensitive data, and support access. > **[Managing subaccounts](https://docs.callers.ai/documentation/agencies/managing-subaccounts.md)** > > Members and permissions across client accounts. > **[API keys](https://docs.callers.ai/documentation/using-callers/generate-api-key.md)** > > Create keys for the Callers API. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.