2 min read 446 words Updated Jun 08, 2026 Created Jun 08, 2026

Inviting Users

Permiso uses sign-up links to bring people onto your instance. You generate a link, share it with whoever you're inviting, and they follow it to create their account and register a passkey. No separate email addresses or user records to create in advance.

Before you start: Email must be configured before sign-up links will work. See Email (SMTP) if you haven't done that yet.

  1. Go to Settings → Administration → Users
  2. Click Invite in the top right
  3. In the dialog that appears, set an expiry date for the link. After this date the link stops working
  4. Optionally set a usage limit. You can cap the link at a single use (for inviting one specific person) or leave it open so multiple people can use the same link
  5. Optionally assign one or more user groups. Anyone who signs up with this link will automatically be added to those groups
  6. Click Create

Copy the link and share it however works best for your team (email, Slack, or any other channel). The link is not tied to a specific email address, so you can send the same link to multiple people if you leave the usage limit open.

The user opens the link in their browser and goes through a short sign-up flow:

  1. They enter their name, email address, and username
  2. Their browser or device prompts them to register a passkey (Face ID, Touch ID, fingerprint, or hardware key)
  3. They land on the Permiso dashboard

The whole thing takes about two minutes. After sign-up, they can log back in at https://[your-company].permisolabs.eu/login with no password needed.

See First Login Experience for more detail on what the sign-up flow looks like from the user's side.

Managing users

From Settings → Administration → Users you can see everyone on your instance and manage their accounts.

From this page you can:

  • View a user's profile, group memberships, and which apps they have access to
  • Enable or disable an account: disabling immediately blocks the user from logging in
  • Promote to admin: admins have full access to Settings and can manage all users, groups, and applications
  • Send a login link: if a user is locked out (e.g. they got a new device and no longer have their passkey), you can send them a one-time link to log back in

Revoking access

Disabling a user's account is immediate. They'll be blocked from logging in on their next attempt. Their account record and audit history are preserved.

For a full step-by-step offboarding process, see Offboarding.