Invite users and auditors
Assign explicit managed-account roles, deliver private invitations and set time-limited access for external auditors.
Invite a user
- Open Settings → Users and roles as an administrator.
- Add the person's email and select their role.
- Copy the private invitation link and deliver it through an approved channel.
- Ask the recipient to choose a password and enroll an authenticator.
Invitations expire after 48 hours. Sparta does not send invitation emails automatically. Reissuing an invitation invalidates that person's earlier invitation and active sessions.
Choose a role
| Role | Intended work |
|---|---|
| Admin | Organization, integrations, users, policy administration and trust publication. |
| Control owner | Assigned controls, evidence, findings and sign-offs allowed by the route permissions. |
| Auditor | Read permitted audit material until the access end date. |
Auditor access requires an expiry within the next 366 days. Report sharing and other resource checks still apply.
Revoke access
Suspend a managed user to block sign-in and invalidate sessions. Role and auditor-expiry changes also invalidate existing sessions. Sparta prevents removal or suspension of the last enabled managed administrator.
See account security for password and authenticator recovery.
Set the organization and audit scope
Define the organization, in-scope frameworks, audit period and policy variables before collecting or exporting evidence.
Use the control checklist
Find missing evidence, assign accountable owners and distinguish control readiness from an audit or certification result.