1. Go to **Admin → Tenant Users** 2. Click **Invite User** 3. Enter email, select role 4. Click **Send Invite** The user gets an email to set up their account. They see only features allowed by their role.