User Management
Manage your team members, control access levels, and configure user permissions. Understand how user seats work across different plans.Understanding User Seats
QuivaWorks uses a per-seat licensing model:Free Plan
Maximum 3 usersFixed limit - cannot add more users without upgrading
Paid Plans (Pro/Team)
Unlimited usersEach user added increases your monthly bill by the per-user rate
How User Seats Work
Free Plan:- Maximum 3 active users allowed
- Cannot add additional users without upgrading to a paid plan
- Must remove existing users before adding new ones if at limit
- Add as many users as needed
- Each user increases your monthly bill:
- Pro: +15/user/month annual)
- Team: +31/user/month annual)
- Users added mid-cycle are prorated
- Users removed provide credit at next billing cycle
Billing Impact: Every active or suspended user in your account counts toward your total user count and affects your bill. Monitor your user list regularly to avoid paying for unused seats.
Adding Users
Invite team members to collaborate on your QuivaWorks account.Check Available Seats
Free Plan: Verify you have fewer than 3 usersPaid Plans: No limit - each new user adds to your monthly bill
Enter User Details
- Email address - Where the invitation will be sent
- First and last name
- Role - Select appropriate access level

Billing Impact When Adding Users
- Free Plan
- Paid Plans
No additional cost, but limited to 3 users
- User 1: $0
- User 2: $0
- User 3: $0
- User 4: ❌ Must upgrade to add
User Roles
Choose the appropriate role based on what each user needs to do:Root
Admin
Billing
Developer
Monitor
Managing Users
Updating User Roles
Only Root and Admin users can change roles.
Changes take effect immediately. Changing a user’s role does not affect seat count or billing.
Restrictions:
- You cannot change your own role
- Admins cannot modify Root user roles
- Admins cannot assign the Root role
Suspending Users
Temporarily restrict access without deleting the account:
What happens:
- User cannot log in
- All active sessions are terminated
- User resources remain in the account
- Can be reactivated by an Admin at any time
- Employee on extended leave
- Temporary contractor work completed
- Investigating potential security issue
- Pending account transfer
View suspended users by filtering for “Suspended” status in user management.
Terminating User Sessions
Force a user to log out from all devices:
Use cases:
- User reports device stolen
- Suspected unauthorized access
- User forgot to log out on shared computer
- Troubleshooting access issues
Users can also manage their own sessions in their personal settings.
Deleting Users
Permanently remove a user from your account and free up a licensed seat:Billing Impact When Removing Users
- Free Plan
- Paid Plans
No billing impactDeleting a user frees up a seat to add another user (up to 3 total).
Freeing Up Seats: To stop being billed for a user and free up their seat, you must delete them (not just suspend them). The seat becomes available immediately for a new user, but billing adjustments apply at your next billing cycle.
Managing Seat Capacity
Checking Current Seat Usage
View User Count
See total count at the top:
- Active users (including pending invitations)
- Suspended users (still consuming seats)
When You Can’t Add More Users (Free Plan)
If you’ve reached the 3-user limit on the Free plan:- Option 1: Upgrade
- Option 2: Remove Users
Optimizing Seat Usage
Audit Inactive Users
Audit Inactive Users
Monthly review:
- Navigate to Account Management → Users
- Check last login date for each user
- Identify users who haven’t logged in for 30+ days
- Contact inactive users to verify they still need access
- Delete accounts that are no longer needed
Use Suspension Carefully
Use Suspension Carefully
Remember: Suspended users still consume seats and incur charges.Best practices:
- Use suspension for short-term situations only (1-2 weeks max)
- For extended leave or departures, delete the user instead
- Can always re-invite the user later if needed
- Monitor suspended users weekly
Consolidate Roles
Consolidate Roles
Consider if you need separate users for:
- Finance team members who only check billing occasionally
- Stakeholders who rarely log in to view reports
- Contractors who completed their work months ago
- Share credentials for infrequent billing access (not recommended for security)
- Export reports and share externally for stakeholders
- Delete contractor accounts when work is complete
Plan for Growth
Plan for Growth
When planning user additions:Calculate monthly cost impact:
- Pro: Each user = +228/year)
- Team: Each user = +468/year)
- Monthly increase: 10 × 190/month
- Annual increase: $2,280/year
- Consider annual billing for 20% discount
Recovery Codes
Admins can issue or view recovery codes for users who have enabled MFA.Issuing New Recovery Codes
When recovery codes are issued or viewed, the user receives a “Security Codes Viewed” email notification to alert them of the access.
Viewing Existing Codes
Resource Sharing
All resources (agents, flows, MCP servers) are shared across your entire account. All team members can access resources based on their role permissions.
- Resources are organized into collections within flows
- Access is controlled by role, not by who created the resource
- When a user is deleted, their resources remain accessible to the team
- No per-user resource ownership or isolation
- Root/Admin: Full access to all resources
- Developer: Can create, modify, and delete all resources
- Monitor: Can view all resources (read-only)
- Billing: Cannot access resources
Best Practices
User Lifecycle Management
Onboarding New Users
Onboarding New Users
When adding new team members:
- Verify seat availability (Free plan) or budget impact (Paid plans)
- Create account with appropriate role
- Send invitation email
- Verify they receive and accept invitation
- Confirm they enable MFA (required for Admin/Root)
- Provide onboarding documentation
- Review access after first week
- Free plan: Can only add if under 3 total users
- Paid plans: Each user adds 39/month to your bill
Regular Access Reviews
Regular Access Reviews
Monthly reviews:
- List all active users
- Check last login date for each user
- Verify each user still needs access
- Identify suspended users (still being billed)
- Confirm roles are still appropriate
- Delete inactive accounts to reduce costs
- Comprehensive audit of all permissions
- Review role assignments
- Update access based on job changes
- Document why each elevated role is needed
- Calculate actual cost of user seats
Offboarding Process
Offboarding Process
When users leave your organization:Immediately:
- Suspend the user account
- Terminate all their sessions
- Frees up the licensed seat
- Stops billing for that user at next cycle
- Cannot be undone - data is preserved but user access is removed
- Who left and when
- What resources they managed
- Who took over their responsibilities
Security for Elevated Roles
Security for Elevated Roles
Mandatory for Root and Admin:
- Enable MFA immediately
- Use passkeys when possible
- Store recovery codes in password manager
- Use strong, unique passwords
- Review sessions monthly
- Enable MFA
- Use password manager
- Review active sessions regularly
Role Assignment Guidelines
- Small Teams (2-5)
- Growing Teams (6-20)
- Large Orgs (20+)
Typical structure:
- 1 Root (founder/owner)
- 0-1 Admin (if needed)
- 2-4 Developers
- 5 users × 95/month
- Annual: 900/year with 20% annual discount)
Troubleshooting
Can't add more users (Free plan)
Can't add more users (Free plan)
Error: “Maximum users reached” or “Upgrade required”Cause: Free plan is limited to 3 users total (active + suspended + pending invitations)Solutions:Option 1 - Delete existing users:
- Review your user list
- Delete users who no longer need access
- Remember: Suspended users count toward the limit
- Once under 3 users, you can add new ones
- Go to Account Management → Billing and Plans
- Choose Pro (39/user/month)
- Add unlimited users
User didn't receive invitation email
User didn't receive invitation email
Solutions:
- Check spam/junk folder
- Verify correct email address was entered
- Click “Resend Invitation” in user management
- Try different email address if corporate email blocks it
- Ask user to check email filters/rules
Can't change a user's role
Can't change a user's role
Common causes:
- You don’t have Admin or Root role
- Trying to change your own role (not allowed)
- Admin trying to change Root user (not allowed)
- Admin trying to assign Root role (not allowed)
Suspended user still has access
Suspended user still has access
Why this happens:Active sessions don’t terminate automatically on suspension.Solution:
- Click on the user
- Use the “Logout” option to terminate all sessions
- Sessions expire after 24 hours maximum anyway
Still being billed for removed users
Still being billed for removed users
Why this happens:User seat charges apply for the full billing period when a user is removed.Expected behavior:
- User deleted on day 10 of monthly cycle
- You’re still charged for them for the full month
- Next month’s bill reflects the reduced user count
- No prorated refunds for mid-cycle deletions
Need to recover deleted user
Need to recover deleted user
Unfortunately:Deleted users cannot be recovered. You’ll need to:
- Send a new invitation to the same email
- They’ll need to accept and set up a new account
- Re-enable MFA
- Their old resources remain accessible to the team
- If you re-invite immediately, you’re billed continuously for the seat
- If you wait until next cycle, you can add them at the new billing rate
Too many Admin users
Too many Admin users
Security concern:Having too many Admins increases security risk.Recommendation:
- Limit Admin to 2-5 people maximum
- Review if all Admins still need that level of access
- Consider downgrading some to Developer role
- Document why each Admin role is necessary
Understanding user count vs. billing
Understanding user count vs. billing
What counts toward billing:
- ✅ Active users
- ✅ Suspended users (still billed!)
- ✅ Pending invitations (once accepted)
- ❌ Deleted users (stopped at next billing cycle)
- Maximum 3 total users (all types)
- No per-user charges
- Every active and suspended user incurs charges
- View exact count in Billing and Plans
User Management Checklist
New User Setup
- Verify seat availability (Free) or budget impact (Paid)
- Calculate monthly cost increase for paid plans
- Determine appropriate role (least privilege)
- Send invitation with clear expectations
- Verify invitation accepted within 48 hours
- Confirm MFA enabled (if Admin/Root)
- Provide onboarding documentation
- Review access after trial period
Regular Maintenance
- Monthly: Review active users list
- Monthly: Check for inactive accounts (free up seats)
- Monthly: Review suspended users (still being billed!)
- Monthly: Calculate actual user seat costs
- Quarterly: Audit role assignments
- Quarterly: Verify elevated roles still needed
- Annually: Comprehensive security review
User Departure
- Suspend account immediately
- Terminate all sessions
- Delete API keys within 1 hour
- Review and transfer resources
- Delete user account within 24 hours (not just suspend)
- Confirm seat freed up in user management
- Verify next bill reflects reduced user count
- Document handoff and transition
Cost Optimization
- Monthly: Identify users who haven’t logged in for 30+ days
- Monthly: Delete inactive users to reduce costs
- Monthly: Convert long-term suspended users to deleted
- Quarterly: Review if Monitor-role users can be removed
- Quarterly: Calculate potential savings from user reduction
- Annually: Consider annual billing for 20% discount
Related Resources
Roles & Permissions
Detailed breakdown of what each role can do
Plans & Pricing
Understand per-user pricing and costs
Billing & Subscriptions
Manage billing and view user seat charges
Authentication
Set up MFA for your users
Sessions
Monitor and manage active logins
Security Overview
Complete security best practices