User Invite Permission

Introduction

This release focuses on strengthening Unifize’s permission framework by ensuring that only authorized user roles can invite new users into the organization. The update improves the consistency of permission enforcement across metadata and checklist fields inside a record, therefore providing clearer governance, tighter access control, and preventing unintended user invitations.

What this release covers

• Users without invite permissions were previously able to invite new email IDs from within a record via:

  • The Owner field in the record header

  • The Participants field in the record header

  • The User field inside a checklist

• A new permission: Allow inviting users from chatroom fields has now been introduced and enforced.

  • This governs inviting users from:

    • Owner field

• Only user roles that explicitly have this permission enabled can invite new users.

1. Assign the invite permission only to roles that genuinely require the ability to bring new users into the org.

2. Review role configurations for Admin, Org Member, External, and Read-only users to ensure they align with your organization’s governance policies.

1. This release improves invite-permission enforcement only for user-invite touchpoints inside a record (Owner field, Participants field, and User checklist fields). All other invite entry points, such as the Contacts page and Admin settings, remain unaffected by this update.

2. Any records where unauthorized users had already added new users remain unchanged.

3. Users who lack invite permissions may still see the option to type an email, but the action will fail via error response.