> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.zata.prathamchopde.site/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.zata.prathamchopde.site/_mcp/server.

# Invitations

A sub-user with **Programmatic + Dashboard access** gets an invitation email when you create it. Until it accepts, it cannot sign in, and its access keys do not work either — the sub-user shows **Suspended** with **Invite pending**. Programmatic-only sub-users never get an invitation.

## What the sub-user does

1. Open the invitation email and select the link. It is valid for 7 days.
2. On the **Set your password** page, enter a password twice: 8–128 characters, with at least one lowercase letter, one uppercase letter, one number and one special character.
3. Select **Accept invitation & set password**.
4. Sign in to the Zata console with the **Sub-user** tab on the sign-in page. See [What sub-users see](/sub-users/portal/overview).

If the link no longer works, the page says why: **This invitation has expired**, **Already accepted** (sign in with the existing password), **Invitation revoked**, or **Invalid invitation link**. Ask the account owner to resend it.

> **Note**
>
> If the sub-user only needs its keys for now, you can select **Activate** in its row menu without waiting for the invitation. The keys then work. Sign-in still needs a password from the invitation.

## Invitation status

The status shows as a badge in the sub-user list and on the sub-user's page:

| Badge              | Meaning                                        |
| ------------------ | ---------------------------------------------- |
| **Invite pending** | Sent, not accepted yet.                        |
| **Invite expired** | Not accepted within 7 days. Resend it.         |
| **Invite revoked** | You cancelled it. Resend it to send a new one. |
| No badge           | Accepted. The sub-user can sign in.            |

## Resend or revoke

Open the sub-user's row menu (⋮) in the list, or the **Invitation** card on its page:

* **Resend invitation** sends a new link. The old link stops working.
* **Revoke invitation** cancels a pending invitation. The link stops working at once.

![The sub-user row menu with Manage Suspension, Resend invitation, Revoke invitation, Manage Regions and Delete](/_fern-img/8ac3f75d69165032e2760851359b810aaea30cb6a99a36f6308b1e3cb61864a6.webp)

Limits:

* Wait about 2 minutes between resends.
* Each sub-user can get at most **3 invitation emails** in total. The first invitation, resends and email changes all count. After that, delete and recreate the sub-user, or [contact support](/help/support).
* Once a sub-user has accepted, these options disappear.

## Give dashboard access later

A **Programmatic access only** sub-user can get a dashboard login without being recreated. Its keys keep working.

#### Open the sub-user

Open **Subusers** and select the sub-user's name.

#### Upgrade

In the **Console** card (**Upgrade to Console**), select **Upgrade**.

![The sub-user's page with the Console card showing Upgrade to Console and an Upgrade link](/_fern-img/f3a545b0ed938d829fefc86f74910b6c6fecd53750d3ac5526d3ce9d01f76788.webp)

#### Send the invitation

Enter the person's email and select **Send Invitation**. The sub-user then follows the steps in [What the sub-user does](#what-the-sub-user-does).

## Change a sub-user's email

For a sub-user with dashboard access, open its page, select **Manage** in the **Console** card, enter the new email and select **Update Changes**.

* A new invitation goes to the new address, and the old invitation link stops working.
* If the sub-user had already accepted, its current password keeps working until it uses the new link.
* Keys, regions and bucket access do not change.
* This uses one of the 3 invitation emails.

## Forgotten password

A sub-user who forgets its password can reset it without a new invitation:

1. On the sign-in page, select the **Sub-user** tab, then **Forgot your password?**.
2. Enter the username or email address and select **Submit**.
3. Open the reset email and set a new password.

![The Zata sign-in page with Account owner and Sub-user tabs and the Forgot your password? link](/_fern-img/0d186c3060136eb193f59cb388223dd74b2030f425f8c99092a1fe40439a2bcb.webp)

If the email address on the sub-user is wrong or no longer used, the reset email cannot arrive. In that case, the account owner [changes the sub-user's email](#change-a-sub-users-email), which sends a new invitation to set a password.