Invite teammates to your workspace
To add a teammate to your Wassla workspace, open Settings then Team, click Invite teammate, enter their work email, pick a role, and send. They receive a branded magic-link email; once they sign in, they land directly in your workspace at the role you assigned. Pricing is based on conversation volume, not seats, so you can invite the entire team without per-user fees.
Open the Team page
Every workspace has a built-in Team page that lists current members and any pending invites.
- Sign in to your workspace at
app.wassla.io/<your-workspace>. - In the sidebar, click Settings.
- Choose Team from the settings menu.
- You will see two sections: active members (status chip "Active") and pending invites (status chip "Invited"), each showing the assigned role.
Only Owners and Admins see the "Invite teammate" button. Operators and Viewers can see the team list but cannot send or revoke invites.
Send an invite
Invites are delivered as a branded email with a one-time magic link that expires after seven days.
- Click the "+ Invite teammate" button in the top-right of the Team page.
- Enter the teammate's work email. Personal addresses work too, but a company domain keeps your audit trail readable and makes it easier to enable SSO later.
- Pick one of three roles from the picker: Admin, Operator, or Viewer. Owner is not in the picker — it can only be granted by promoting an existing member.
- Click Send invite. Wassla emails the teammate immediately and also shows you the accept URL of the form
https://app.wassla.io/invite/<token>in case you want to share it over Slack or WhatsApp instead.
If the teammate does not receive the email, the accept URL stays visible in the pending-invite detail panel. Copy it and send it yourself, or click Revoke invite and start over.
The four workspace roles
Wassla workspaces use a small, fixed set of roles so permissions stay easy to reason about. You cannot create custom roles, and the matrix is enforced by row-level security in the database, so every API call and every page respects the same boundary.
Owner
Full access to everything in the workspace: billing, plan changes, team management, channel configuration (WhatsApp, Instagram, Facebook, SMS, voice, web widget), AI agents, the knowledge base, the Inbox, and all customer data. Owners can promote other teammates to Owner and are the only role that can delete the workspace. There must always be at least one Owner; you cannot remove or demote the last one.
Admin
Manages day-to-day operations: AI agents, channels, the knowledge base, team invites, billing, and integrations. Admins can do almost everything an Owner can, except they cannot promote another teammate to Owner or delete the workspace.
Operator
Built for the people who actually handle conversations. Operators can use the Inbox, work tickets, leave internal notes, take over from an AI agent during a handoff, and flag knowledge gaps. They cannot change channel configuration, edit AI agents, manage the team, or view billing.
Viewer
A safe, beta-tester seat for stakeholders or new hires who want to try things without risking exposure to live customer data. Viewers can only use the Playground to test the agents your team built — they cannot see the real Inbox, History, People, or any other customer data. Use this role generously; it is the right default for anyone who only needs a look around.
Wassla also operates a separate platform staff portal with Finance and Auditor roles for our internal billing and compliance teams. Those roles are not available inside customer workspaces today. If you need a finance-only or audit-only seat for your own team, email [email protected] and we will help you scope it.
For a deeper comparison of what each role can and cannot do, see Wassla team roles and permissions.
How invite acceptance works
When the teammate clicks the link, three things happen on the server side.
- The accept page calls a public lookup that returns your workspace name and logo, so the invitee sees your branding ("Join {Your Company}"), not Wassla's, before they sign in.
- If they are a brand-new user, Wassla provisions their account through Supabase's invite flow, signs them in, and offers a one-step "Set a password" screen so they can sign in directly next time without needing another magic link. They can skip it and use magic links forever if they prefer.
- The accept call adds them to both the portal access list and tenant membership in a single transaction, then forwards them to the right landing page for their role: Operators land in the Inbox, Viewers land in the Playground, and Owners and Admins land on the workspace home.
Invites are bound to the email you typed in. If the teammate is already signed in with a different account, Wassla shows a "Wrong account" screen that names the invited email and offers a one-click "Sign out and switch accounts" button — no confusing redirect loops.
Invites that pass the seven-day window expire automatically and drop off the pending list. To retry, send a fresh invite.
Resend, revoke, or copy an invite link
Click any row in the "Invited" section of the Team page to open its detail panel.
- Copy the accept URL to your clipboard and send it over a different channel — useful when the invite email is caught by a spam filter.
- Revoke the invite if it went to the wrong person or you changed your mind. Revoked tokens stop working immediately, even if the recipient already has the link open in a browser tab.
- To "resend", revoke the existing invite and send a fresh one. This issues a new token with a new seven-day expiry. Wassla does not currently auto-resend the email on demand.
Change a teammate's role
You can promote or demote any non-Owner teammate from the same Team page.
- Click the member's row to open the detail panel.
- Pick a new role from the Role dropdown.
- The change saves immediately and is recorded in the workspace audit log with your name, the previous role, the new role, and your IP address.
The Owner role is not in the dropdown. To hand off ownership, an existing Owner must promote a teammate first, after which the previous Owner can be demoted to Admin.
Remove a teammate
- On the Team page, click the row for the teammate you want to remove.
- Click "Remove from workspace" at the bottom of the detail panel.
- Confirm in the dialog.
Removal is immediate: the server deletes both the portal access record and the tenant membership row in one call, so there is no window where backend access leaks while the UI is gone. Any pending invites issued to the same email are also revoked, so the person cannot accept their way back in.
Past actions stay in the audit log under their name — Wassla never hard-deletes attribution data — so you keep a full record of who did what. If you re-invite the same email later, they rejoin as a fresh member at whatever role you pick.
You cannot remove the last Owner. To hand off ownership before leaving, promote another teammate to Owner first, then have them remove your seat.