Manage Users, Roles & Multi‑Company
Manage Users, Roles & Multi-Company Access
Invite teammates, manage company roles, transfer ownership, and switch between companies in AutoPhish.
AutoPhish lets teams work together inside one company account, while also supporting multi-company access for consultants, MSPs, and organizations that manage several separate environments.
Each company has its own members, campaigns, reports, settings, and audit data. If a user belongs to multiple companies, they can switch between them, but data remains isolated per company.
Who can manage users
User management is available from the company settings area.
Go to: Settings → Manage Companies → Team
From there, authorized users can view team members, invite new users, resend pending invitations, remove members, and transfer company ownership.
Understand roles
AutoPhish uses company-level roles to decide what a user can do inside a specific company.
Owner
The Owner is the primary administrator for a company.
Owners can:
- Manage team members
- Invite Admins and Users
- Remove non-owner members
- Transfer ownership to another Admin
- Manage company settings and billing-related ownership responsibilities
A company can only have one Owner. The Owner cannot be removed until ownership is transferred to another Admin.
Admin
Admins can manage most company operations.
Admins can:
- Manage campaigns
- Invite teammates
- Remove non-owner members
- View reports and company data
- Manage company settings available to admins
Admins cannot transfer ownership unless they are also the Owner.
User
Users have standard company access.
Users can:
- View and run campaigns
- View reports and company resources available to them
Users cannot invite teammates, remove members, or transfer ownership.
Open team management
- Sign in to AutoPhish.
- Open Settings.
- Select Manage Companies.
- Find the company you want to manage.
- Click Team.
If you belong to more than one company, AutoPhish switches to that company before opening the team view so the member list matches the selected company.
Invite a teammate
- Open Settings → Manage Companies → Team.
- Enter the teammate’s email address.
- Choose a role:
- User for standard access
- Admin for team and company management access
- Click Invite User.
If the person does not already have an AutoPhish account, they receive an invitation email with a setup link. They must open the link, enter their name, and set a password.
Invitation links expire after 7 days.
If the person already has an AutoPhish account, they are added to the company and can access it from their account.
Pending invitations and resending invites
Invited users who have not completed setup appear as Pending.
Admins can resend a pending invitation from the Team view. Resending creates a fresh invitation link and invalidates the older one.
Use resend when:
- The recipient cannot find the original email
- The original invite link expired
- The user needs a new setup link
Remove a team member
Admins can remove non-owner members from a company.
- Open Settings → Manage Companies → Team.
- Find the member.
- Click Remove.
- Confirm the removal.
Removed members lose access to that company’s campaigns, reports, settings, and resources.
You cannot remove the company Owner directly. Transfer ownership first, then remove the former owner if needed.
Transfer company ownership
Only the current Owner can transfer ownership.
Ownership can only be transferred to a member with the Admin role.
- Open Settings → Manage Companies → Team.
- Find the Admin who should become the new Owner.
- Click Transfer Ownership.
- Confirm the transfer.
After the transfer, the previous Owner remains an Admin, but no longer owns the company.
Important: If the new Owner does not have an active subscription, subscription-related features may be unavailable until they subscribe.
Work with multiple companies
If your account belongs to more than one company, use the company switcher in the header to change your active company.
The active company controls which campaigns, reports, targets, settings, and team members you see.
Multi-company access is useful for:
- MSPs managing several clients
- Consultants running simulations for multiple organizations
- Internal teams that manage separate business units
Each company remains isolated. Switching companies does not merge data or share campaigns between companies.
Learn more: https://autophish.io/multi-company
Troubleshooting
I do not see team management options
You may have the User role. Ask a company Admin or Owner to update your access or perform the change.
The invite link does not work
Invitation links expire after 7 days. Ask an Admin to resend the invitation.
The user says they did not receive the invite
Ask them to check spam or quarantine folders first. If needed, resend the invite from the Team view.
I cannot remove a member
You cannot remove:
- The company Owner
- Yourself
- The last remaining member of a company
Transfer ownership first if the Owner needs to be removed.
I cannot transfer ownership to someone
The target user must already be a company member with the Admin role. Invite them as an Admin first, or remove and re-invite them with the correct role if needed.
Updated on: 22/05/2026
Thank you!