The Users page lists everyone with staff access to your organisation. Open it from the Settings menu at the bottom of the sidebar (it was previously labelled Team). Everyone can view the list; editing is for firm admins (Administrator or Owner).
To group staff into pods that share the same clients, see Creating and managing teams (pods). That's a separate feature from this page, though the two connect through the Team column below.
At the top of the page you can:
Search — type into Search members... to find someone by name or email.
Status — Active (the default) shows current staff; Inactive shows people whose permission is No Access.
Permission — filter by Owner, Administrator or Member.
Role — filter by job role (as created on the Roles page).
A Reset option appears whenever filters are applied, and the column toggle on the right lets you show or hide columns — your choices are remembered.
Member and Email — the person's name, photo and sign-in email.
Job Title — free-text title (up to 50 characters). Admins click Set (or the current title) to edit it inline; you'll see Job title updated.
Role — the person's job roles. Admins click the cell to assign roles from the list created on the Roles page; the first role assigned becomes their primary role, and you can add several, remove them, or change which is primary (Role assigned successfully, Primary role updated).
Team — the pod this person belongs to. Admins click the cell to assign or clear it, or rename and create teams without leaving the page; everyone else sees the assignment read-only. See Creating and managing teams (pods).
Permission — their access level. Admins change it inline; see the permissions article for who can assign what.
Base Rate and Billable Rate — the person's current hourly rates. Admins click the value (or Set) to open the Staff Rates dialog, where you can Add New Rate or Edit Rate with effective dates, keeping a history as rates change.
AML Access — a per-person switch controlling access to anti-money-laundering features (AML access enabled / AML access disabled). Only admins can flip it.
AML Training — the date of the person's most recent AML/CTF training; admins set it inline (AML training date updated).
Joined — when they joined the organisation.
XPM — if your firm is connected to Xero Practice Manager and the person is linked to an XPM staff record, a View in XPM link appears here.
Actions — the delete (bin) button for removing a member.
Admins can tick the checkboxes at the left of the table to select multiple members. A bulk actions bar appears with:
Change Job Title — sets one job title across everyone selected (Updated job title for N members).
Role — assigns job roles to the selection.
Change Permission — sets one permission level for everyone selected, with a confirmation (This will set N members to …). The same rules apply as for individual changes — you can't bulk-promote above your own level.
Deactivate — set the person's Permission to No Access. They can no longer sign in to the organisation, but they stay on record and appear under the Inactive status filter. This is usually the right choice for departing staff.
Remove — click the bin button in the Actions column and confirm. You'll see Member removed successfully. You can't remove yourself.
If someone tells you they can't sign in, find the cause on the Users page before you change anything.
Ask for the exact error and the email address they used. Most login problems trace back to one of these: the wrong email, an account that's been deactivated, an invitation that was never accepted, or a lost MFA device.
Search for them on the Users page. If they don't appear under the Active status filter, switch to Inactive — their Permission is probably set to No Access, which blocks sign-in on purpose (for example after offboarding).
If they don't appear at all, check the Invitations page. A Pending invitation means they haven't accepted it yet; a Rejected one means they declined it. Either way, resend it rather than forwarding the original email.
Check the email address matches. If the person is signing in with a different address from the one shown on the Users or Invitations page, Nagaris treats it as a separate, empty account. Have them sign out and sign back in with the invited address.
If they're stuck behind two-factor authentication (lost phone, passkey or backup codes), an admin can't clear this from the Users page. Point them to their own Security settings, or contact support to have MFA reset on their account.
Once you know the cause, fix it directly on the Users page:
Deactivated account (Permission is No Access) — click the Permission cell and set it back to Member, Administrator or Owner. This reinstates the same account immediately; there's no need to invite them again.
Invitation never accepted or expired — go to the Invitations page and click the envelope button (Resend invitation) next to their entry. If the address was wrong, revoke the old invitation and send a new one to the correct address.
Locked out by MFA — this can't be reset from the Users page. The person should try the alternative methods on their own sign-in screen (passkey, SMS or backup code), or contact support if none of those work.
For more detail on each of these, see Understanding permissions, Inviting team members and managing invitations, Troubleshooting sign-in, invitations and verification codes, and Managing your security settings.
The empty state (No team members — Invite team members to collaborate on client work.) offers Invite Member directly; inviting is covered in its own article.
Non-admin staff see the same table but read-only: job titles, roles, teams, rates and switches show values (or an em dash) without edit controls.
If the page fails to load you'll see Failed to Load Users with a retry option.
