Company users
Manage who has access to your company — invite new users, add existing ones, set roles and approval limits, and remove access.
Company users
The Users tab (Settings → Users) lists every person with access to the current company. Only administrators can make changes here.
User table
Each row shows:
| Column | Description |
|---|---|
| Name | Click to open the user's profile (set password, roles, approval limit) |
| The user's login email | |
| Approval limit | The maximum invoice amount this user can approve (blank = unlimited) |
| Next approver | The user's designated backup approver when they are unavailable |
| Role | Employee or Administrator — determines what the user can see and do |
| Last login | The most recent sign-in date and relative time |
A green user icon indicates the account is active; red means suspended.
Adding users
Add — Opens the create-user form. Enter the name and email address; the user receives a welcome email with their temporary password and a link to set MFA.
Add existing — If the person already has a user account in iApprove (from another company in the same tenant), you can add them to this company without creating a second account.
Roles
| Role | Capabilities |
|---|---|
| Employee | Can view and approve invoices in their own views and inbox |
| Administrator | Can access all invoices, configure all settings, manage users, and use the Designer |
Approval limits
An approval limit caps the maximum invoice total a user is allowed to approve. An invoice above the limit must be routed to a user with a higher (or unlimited) limit. Set in the user profile form.
Changing a password
Click the key icon on any user row to set a new password for that user directly (without sending a reset email). Useful when onboarding users who haven't received the invitation email.
Impersonating a user
Tenant administrators see an additional impersonate icon (disguised-person icon). Clicking it opens a confirmation and then signs you in as that user — useful for troubleshooting permission issues. An audit trail records every impersonation.
Removing a user
Click Remove on any user row (except your own) to revoke that user's access to this company. The user's account is not deleted — they can still access other companies they belong to.