Viewer Role and Streamlined Invites

Administrators can now invite users directly from Administration and assign a role at the point of invite, instead of managing access as a separate step. Three roles are available: manager, who can manage roles and procedures; member, who can edit objects but not settings; and a new viewer role, which is read-only and can’t comment, create, or be assigned tasks.

Pending invites can be resent, have their role changed, or be revoked before they’re accepted. The rollout also simplifies the Citadel integration: instead of creating users through the API, sign-up now goes through the standard flow with an organization-level guard.