Workspace access (users & roles)

Sertiq has two separate lists of people that often get confused. They serve different purposes — read this once and the distinction sticks.

TL;DR

Settings → Workspace access	Organization → Employees
People who log in to Sertiq	Quality team headcount
Roles: admin / editor / viewer	Job title, department, skills, certifications
Counts against `membersMax` plan limit	Counts against `employeesMax` plan limit
Receives email invitation + sign-in credentials	Doesn’t need to log in — pure HR-style record
Example: CEO, QA Manager, Plant Manager	Example: line operators, warehouse staff, external inspectors

If someone needs both (e.g. the QA Manager who logs in and shows up on 8D teams), add them to both lists. Linking is optional — when set, employees.user_id ties an employee record to a workspace user.

Workspace access (`/settings/users`)

Admin-only page that controls Sertiq sign-in.

Roles

Role	What they can do
Admin	Everything: invite/remove members, change roles, edit org profile, change plan, configure issue types, view billing, full CRUD on all data
Editor	Create + edit suppliers, NCRs, CAPAs, evaluations, RMAs, calibration. Cannot manage workspace or billing.
Viewer	Read-only. Useful for auditors, external consultants, executives who want to monitor without risk of edits.

Sending an invitation

Admin opens /settings/users
Enter email + role → Send invite
Invitee gets an email with a 7-day signed link
Clicking the link → sign-up form (email pre-filled) → account created, joined to the inviter’s organization

Invitations appear under Pending invites until accepted or expired. Admins can Revoke at any time.

Changing a role

Inline dropdown next to each member → Change role. Effect is immediate. There must always be at least one admin — demoting the last admin is blocked.

Removing a member

Click Remove next to a member. Their data (NCRs, CAPAs they created) stays under their name; they lose access. Removing yourself is blocked — ask another admin.

Employees (`/organization/employees`)

Your operational org chart — every person who works at your company, whether or not they touch Sertiq directly.

When you’d add an Employee but not a Workspace user

Line operator named on a 5-Whys investigation
Warehouse picker mentioned in an NCR description
External calibration technician
New hire who hasn’t been onboarded to Sertiq yet
People you reference in CAPA assignments via name + email only

Fields tracked

Full name, email (optional), phone
Job title, department, reports-to (manager hierarchy)
Skills (e.g. ["GD&T", "Welding L2", "ISO 19011 lead auditor"])
Certifications (e.g. [{ "name": "Six Sigma Green Belt", "expires": "2027-03-01" }])
Hire date, status (active / on_leave / inactive)
user_id — optional FK to auth.users, set when an Employee is also a Workspace user

Departments

Under /organization/departments. Each employee belongs to one. Departments power:

Employee filtering
Ownership grouping in analytics
CAPA assignment routing by department

Plan limits

The two lists are gated separately:

Plan	`membersMax` (workspace)	`employeesMax` (org headcount)
Free	1	3
Starter	3	15
Pro	10	50
Enterprise	Unlimited	Unlimited

At the limit, Add is replaced with Upgrade to add more.

FAQ

“I added someone to Employees — why can’t they log in?” The two lists are independent. Send them a Workspace invitation from /settings/users.

“Can I import employees from CSV?” Not yet — manual entry only. CSV import is on the v1.3 roadmap.

“Does removing a workspace member also remove their Employee record?” No. Workspace removal only revokes login. The Employee record (if any) stays for historical traceability.