Users & Invitations

The Users tab in Settings lets administrators manage everyone who has access to the fraud0 dashboard. You can invite new users, control what each person can see and do, and remove access when it is no longer needed.

User list

The user list shows all active, pending, and suspended users in your organization. You can search by email address, name, or user ID.

Users are displayed in a hierarchical tree view organized by Agency, Organization, and Tags, making it easy to understand how access is structured. The table for each user shows:

Column	Description
Name	The user’s display name.
Email	The email address associated with the account.
Status	Active (can sign in), Pending (invitation sent but not yet accepted), or Suspended (access temporarily revoked).
Role	Full Access or Limited Access (see Roles below).
Permissions	A summary of the permissions granted to the user.

Roles

fraud0 uses two roles to control access:

Full Access (org_root)

Users with the Full Access role have unrestricted access to every part of the dashboard, including all administrative functions. This role is typically reserved for account owners and senior administrators.

Limited Access (org_sub_user)

Users with the Limited Access role are subject to granular, role-based access control. Permissions are configured along three dimensions:

org_access — whether the user can read data only or both read and write data at the organization level.
tags_scope — whether the user can see all tags or only a subset of tags.
tag_access — for each tag the user can access, whether they have read or read and write permissions.

Inviting a new user

Click “Invite User” at the top of the Users tab.
Enter the email address of the person you want to invite.
Assign a role (Full Access or Limited Access) and configure permissions if applicable.
Send the invitation. The invitee receives an email with a link to accept.

Managing invitations

Resend Invitation — generates a new invitation token and resets the 72-hour expiry window.
Cancel Invitation — revokes the invitation immediately. A cancelled invitation link can no longer be used.

Administrators can perform the following actions on existing users:

Action	Description
Manage Access	Change a user’s role or adjust their granular permissions.
Reset Password	Send the user a password-reset email.
Force Sign Out	Immediately end all active sessions for the user.
Suspend	Temporarily block the user from signing in. The user’s configuration is preserved.
Resume	Re-enable a suspended user so they can sign in again.
Transfer Ownership	Make another Full Access user the account owner. This action can only be performed by the current owner.
Remove User	Permanently remove the user from the organization.