> ## Documentation Index
> Fetch the complete documentation index at: https://help.stralos.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication and session support

> Login, session support, and managing your company's users

Stralos uses email-based code login. Active users request a six-digit code, verify it, and then continue into the product.

## User records

Users belong to a company and have:

* Name
* Email
* Role
* Status
* Last login timestamp

Only active users can complete login. Unknown, disabled, or inactive users receive generic denial responses during verification.

## Login flow

1. The user enters their email address.
2. Stralos checks whether the user can sign in.
3. If email delivery is configured and the user is active, the code is sent.
4. The user verifies the six-digit code.
5. Stralos starts the signed-in session.

## Managing your company's users

Admins can invite new members, view the member list, and update member names directly from within the application. You do not need to contact Stralos support for routine user management.

### Inviting users

You can invite one or several people at once from the same dialog.

To invite people to your company:

1. Open **Settings → Users**.
2. Click **Invite people**.
3. Add the people you want to invite. You can:
   * Enter each person's email address, name, and role (`Member` or `Admin`) directly in the rows, using **Add another row** to add more.
   * Paste a list of addresses using the paste option beside **Add another row**. Accepted formats include one address per line, `email, name, role` (comma-separated), tab-separated spreadsheet columns (a header row is skipped automatically), and `Name <address>` pairs. Names are derived from email addresses when missing, and flagged for you to confirm before sending.
4. Click **Send invitations**.

Stralos sends each invitation in turn. If the person does not yet have a Stralos account, the email contains a temporary password they use to sign in for the first time before setting a permanent one. The temporary password expires after 7 days. If the person already has a Stralos account, they receive a separate notification email telling them your company has invited them and directing them to sign in to accept. The dialog shows the result for each row; refused rows stay editable so you can correct and retry them without re-entering the rest.

The dialog accepts up to 50 rows at a time. If you paste a larger list, the first 50 rows are loaded and the remainder is shown in the paste area for you to send in a second pass.

Each person's membership status shows as **Invitation pending** until they accept.

**Trial limit:** Free trials are limited to 3 users, including any whose status is still **Invitation pending**. If your company is on a free trial and you try to invite a fourth person, the invitation is refused. To add more users, start a paid subscription in **Settings → Billing** first.

If an address belongs to someone already in your company, the row is flagged before you send. If an address belongs to a person who has a Stralos account in another company and has not yet signed in for the first time, the invitation is refused. Ask them to accept their first invitation and sign in before you invite them to your company.

### Seat limits

Each invitation uses one of your company's seats. Pending invitations count against your seat total the same as active members: the seat is reserved when the invitation is sent, not when it is accepted. Revoking an invitation releases the seat.

Above the member list, admins see how many seats are used, for example **3 of 10 free beta seats used, including pending invitations**. The wording follows your plan: **free beta seats**, **free trial seats** or **paid seats**.

When all seats are in use, **Invite people** is switched off and the message says what to do next:

| Plan | What to do |
| - | - |
| Free beta | Add a credit card profile in **Settings → Billing**. |
| Free trial | Go to **Settings → Billing** to subscribe. |
| Paid | Increase your seat count in **Settings → Billing**. |

Select **Manage billing** in the message to open billing.

Invitations and membership acceptances are also blocked when your subscription is not active, for example if a payment has failed or the subscription has been cancelled. Stralos shows a message indicating the account is in read-only billing state. Resolve the payment issue in **Settings → Billing** first.

### Resending an invitation

If the original invitation email was not received or the temporary password has expired, you can send a new one.

1. Open **Settings → Users** and locate the invited member.
2. Click **Resend** on their row.

Stralos queues a new invitation email with a fresh temporary password. The previous temporary password stops working when the new invitation is sent. The confirmation says the invitation is on its way because delivery happens asynchronously. **Resend** is available only while the membership is **Invitation pending**.

### When someone opts out of invitations

Every invitation email includes a link: **Stop Stralos invitations to this address**. Mail apps that support one-click unsubscribe may also show their own unsubscribe button. If the recipient uses either, Stralos stops sending invitations to that address.

After that, inviting the address or resending its invitation fails with the message "This person has opted out of Stralos invitations." Opting out does not affect sign-in codes, signup verification codes, or password resets the person requests themselves.

Only the person who owns the address can reverse an opt-out. Ask them to email Stralos support from that address. Once support has reversed it, you can invite them or resend as normal.

### Viewing your member list

Open **Settings → Users** to see all active and invited members of your company. The member list is a table with the following columns:

| Column | Description |
| - | - |
| Name | The member's display name. Members who belong to more than one company show an explanation here instead of an edit control. |
| Email | The member's email address. |
| Role | The member's role in your company: **Member** or **Admin**. |
| Status | Where the person's membership is at. See the statuses below. |
| Default office | Shown to admins only. The office new projects created by this person start from. Shows the office name with **First office (automatic)** beneath it when the person has not chosen one. If no active office exists yet, the column shows **No active office yet**. |
| Self-assign locations | Shown to admins only. The offices whose projects this person can join on their own. If there are too many to fit, the rest are counted in a **+N more** badge; hover over it to see them all. |
| Actions | Membership actions menu (role change and removal), **Edit**, and **Resend** controls where applicable. |

Membership statuses are:

| Status | Meaning |
| - | - |
| Active | The member has signed in at least once. |
| Invitation pending | An invitation has been sent but not yet accepted. The date the invitation was sent is shown. |
| Awaiting first sign-in | The person accepted the invitation to your company but has not yet signed in. This status is never shown on your own row. |
| Access revoked | The member no longer has access to this company. |

If your company has no members yet, the panel shows a prompt to invite the first person. Members who cannot invite see a note that an admin of this company can invite people.

### Contractor people

If a contractor company works in your company, its people appear in your member list marked **via** the contractor company, for example **via Acme Contracting · no cost**. Their contractor company pays for them, so they never use one of your seats. The contractor company adds and removes its own people; you can end the whole link from **Settings** → **Contractors**. See [Contractor companies](https://help.stralos.app/guides/admins/contractor-companies.md).

In a company a contractor created that has no billing of its own yet, **Invite people** is switched off. To invite people from outside the contractor company, set up billing for the company first.

### Changing a member's role

You can change any member's role between **Member** and **Admin**.

1. Open **Settings → Users** and locate the member.
2. Click the membership actions menu on their row.
3. Select **Make admin** or **Make member**.
4. A confirmation dialog shows the access implications of the change. Review the description, then click the confirm button to apply it.

If you are removing the last admin, the change is refused. The dialog shows the server's error message. Assign another admin first, then retry.

If you change your own role, you are signed out immediately after the change is applied. Sign in again to continue with your updated access.

### Removing a member

You can remove a member to revoke their access to the company.

1. Open **Settings → Users** and locate the member.
2. Click the membership actions menu on their row.
3. Select **Remove from company**.
4. A confirmation dialog states that the member's seat becomes available. Your company's purchased seat limit is unchanged. Click **Remove member** to confirm.

If you remove yourself, the option is labelled **Leave company** and you are signed out immediately after the removal. Sign in to a different company or contact Stralos support if you need further access.

At least one admin must remain in the company. If you are the only admin, removing yourself is blocked. The dialog shows an explanation before you confirm.

### Updating a member's name

You can update the display name of a member who belongs only to your company.

1. Open **Settings → Users** and locate the member.
2. Click **Edit** on their row. The name field opens inline in the row, alongside the member's email address, role, and status.
3. Type the new name and press **Enter**, or click **Save name**. To discard the change, press **Escape** or click **Cancel**.

If a member belongs to more than one company, only they can change their own name and email address. Their row has no **Edit** button. A note above the table explains this before you interact with any row.

Email addresses cannot be changed by an admin. A user changes their own email address through their account settings.

### Setting self-assign locations

Self-assign locations let a person add themselves to projects run from particular offices, without waiting to be invited. When a project's office is one of their self-assign locations, they can join it as a member. Projects run from any other office still need the project team to add them.

1. Open **Settings → Users** and locate the member.
2. Click the membership actions menu on their row.
3. Select **Edit self-assign locations**.
4. In the **Self-assign locations** panel, tick the offices they can join projects at, and untick any they should no longer use.
5. Click **Save locations**.

Only your company's active offices are offered. Add or retire offices under **Rates & resources → Locations**. **Edit self-assign locations** is not offered for a member whose access has been revoked.

If an office on the person's list has since been retired, the panel shows it under **No longer available**. Until you save, they can still join projects run from it. Saving removes it, and a retired office cannot be chosen again.

If an office is retired while the panel is open, the save is refused. Stralos refreshes the list of offices so you can check the choices and save again.

If the self-assign locations cannot be loaded, a message appears above the table with a **Try again** button. You cannot view or change them until they load.

### Setting a member's default office

The default office is the office new projects created by that person start from. They can still choose a different office for any individual project. When no default has been set, the first active office in your company is used automatically.

1. Open **Settings → Users** and locate the member.
2. Click the **Default office** cell on their row to open the **Default office** panel.
3. Choose an office from the list, or select **Use the first office (automatic)** to clear any specific choice.
4. Click **Save default office**.

Only your company's active offices are offered. Add or retire offices under **Rates & resources → Locations**.

When **Use the first office (automatic)** is chosen, the **Default office** column shows the office name with **First office (automatic)** below it so you can see which office currently applies without it reading as a deliberate choice.

## Support access

Stralos support can sign in as one of your people to help you, or make a change to your company or its people. **Settings → Support access** lists every time they did, and lets you turn support sign-in off. Only admins can open it.

### Turn support sign-in off or on

Support sign-in is on by default. While it is on, Stralos support can sign in as one of your people. They must give a reason, and each sign-in lasts no more than 1 hour.

1. Open **Settings → Support access**.
2. Switch off **Allow Stralos support to sign in to your company**.
3. Select **Turn off** to confirm.

Any support sign-in in progress ends straight away, and support can't sign in again until an admin switches it back on. Turning it on again doesn't need a confirmation.

Even when sign-in is off, Stralos support can still make account changes, such as changing someone's email address or their place in your company, because billing and account recovery need them. Those changes are still listed.

### The support access list

Each row shows:

| Column | What it shows |
| - | - |
| **When** | When it happened. |
| **Who** | The Stralos support person, or **(your admin)** for an admin of your company who turned support sign-in off or on. |
| **What they did** | For example **Signed in**, **Changed email**, **Changed access**, **Changed support sign-in**, or a plain description of another change. |
| **Person** | The person the action affected. A change to the company itself shows a dash. |
| **Reason** | The reason support gave. |
| **How long** | For a sign-in, how long it lasted. A sign-in still running shows **In progress** and the time it ends by. |
| **Ended** | For a sign-in, when it ended. **(time limit)** means it ran to the 1-hour limit. |

Older sign-ins, from before Stralos recorded their length, show **length not recorded (up to 1 hour)**. If support has never signed in or made a change, the list shows **No support access yet**.

## Support notes

* Keep user status current when staff join or leave.
* Use roles deliberately; the current auth model has `admin` and `member` roles.
* If a user cannot sign in, confirm the email address, user status, and role before escalating.
* In deployed environments, sign-in codes are delivered by email.
* If an invite is refused with a seat-limit message, increase the seat count under **Settings → Billing** before retrying.
* If an invite is refused because the person opted out of invitations, the person must ask Stralos support, from that address, to reverse it.
* Revoking a member who no longer needs access frees a seat immediately.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.