> For the complete documentation index, see [llms.txt](https://docs.arnica.io/arnica-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.arnica.io/arnica-documentation/platform-operations/tenant-management/inviting-members.md).

# Inviting Members

To join an existing Arnica tenant, users must be invited. Owners and Admins can add new users through the **Admin → Security → Users & Roles** page when RBAC is Arnica-managed.

## How to invite a member

1. Navigate to **Admin → Security → Users & Roles**.
2. Enter the user's email address in the **Email** field.
3. Click **Invite**.

The invited user will receive a welcome email with a personalized link to set their password. Once they sign in, they will be redirected into your tenant.

For full details on managing users, roles, and permissions, see [Users & Roles](/arnica-documentation/platform-operations/security/users-and-roles.md).

## Supported permissions

Owners and Admins can invite users, remove users, and change roles when RBAC is Arnica-managed. Admins have the same user-management capabilities as Owners; only tenant rename and tenant delete remain Owner-only. You cannot change the Owner from this page. See [Changing the Tenant Owner](/arnica-documentation/platform-operations/tenant-management/changing-the-tenant-owner.md).

{% hint style="info" %}
When RBAC is SSO-managed, roles come from your identity provider group mapping rather than the Users & Roles role picker. See [Role Based Access Control (RBAC)](/arnica-documentation/security/role-based-access-control-rbac.md).
{% endhint %}

## Tenant membership

Each Arnica user can only belong to one tenant at a time. If a user needs to move to a different tenant, they must leave their current one first via **Profile menu → Edit Account → Leave**.