10.2. Create Users, Assign Roles (Admin, Technician, Dispatcher), and Manage Accounts

Navigate to Settings > General in the sidebar to open Admin Settings, then select Users under Organization & Access. The User Management page includes List and Structure tabs for managing user accounts and reporting relationships.

• Add a User: AlgaPSA gives you two ways to add MSP staff members:

  • Email invitation (default): Provide the user's first name, last name, email, and role — leave the password field blank. AlgaPSA sends a 24-hour invitation link to that address. The invitee follows the link to /auth/team/setup and sets their own password. Their assigned role is applied automatically when they accept. Each pending invitation reserves a license seat immediately, so an admin with one seat remaining cannot send two invitations at once.
  • Set password manually: Provide a first name, last name, email, and an initial password. The user can sign in right away and change their password at any time.

  You can also invite team members from the Team Members step of the onboarding wizard using the same two options.

• Assign Role: After creating a user, or when editing an existing one, you can assign their roles. In the user details drawer, select the desired roles (e.g., "Manager," "Admin," "Finance," "Technician," "Project Manager," "Dispatcher") from the "Select roles to add" dropdown, then click Add Role. Ensure you click Save Changes after adding roles.

  Permission requirements: Assigning or removing an MSP staff role (e.g. Manager, Admin, Finance, Technician, Project Manager, Dispatcher) requires the user:update permission. Assigning or removing a client-portal–only role requires either client:update or user:update. Users who do not hold the appropriate permission will receive a "Permission denied" error and no role change will be saved.

• Pending Invitations: The User Management list shows pending email invitations alongside active accounts. A pending invitation reserves a seat until it is accepted or revoked. Use the Revoke action on any pending invitation to cancel it and release the reserved seat. Resending an invitation to the same address refreshes the invitee's name, role, and 24-hour expiry on the existing invitation.

• User List: View active and inactive users and pending invitations, their emails, and assigned roles. You can search for users and use the "Actions" menu (three dots) to "Edit" or "Remove" a user.

• Edit User: Modify a user's details, change their password, assign/remove roles, and set their account status (Active/Inactive).

• Working hours: User details includes a per-weekday working-hours editor. Set the hours each person works on each day of the week — this handles four-day weeks, part-time schedules, and short Fridays that a single weekly-hours figure cannot. These hours become the capacity figure in the Employee Utilization report.

  Technicians can edit their own working hours without administrator permission, so a schedule change does not have to be raised as a request.

Directory-driven user lifecycle

On Pro, Microsoft Entra can drive internal-user deactivation and reactivation over SCIM 2.0. Deactivating someone in Entra deactivates their AlgaPSA account and revokes their sessions immediately, which removes the PSA from your manual offboarding checklist.

Entra controls only whether a user is active. AlgaPSA remains authoritative for profiles, roles, teams, and license assignment — a directory group cannot make someone an administrator. SCIM also works on existing users rather than creating them, so email invitations remain the route for adding staff.

See SCIM user provisioning for setup.