User Setup

Manage who has access to this organization and their role.

Note: this creates the account and access grant, but there is no sign-in flow wired up yet (no password reset / SSO email is sent) — invited users can't actually log in until that's built.