Inviting your team and setting roles

Inviting your team and setting roles.

DuoApp is only as useful as the people working in it. Adding your team takes a couple of minutes, but the part that matters is roles — getting the right access in front of the right person, so the office sees the figures and the site sees the work, without anyone tripping over things that aren't theirs.

Getting started 5 min read Updated June 2026

Everyone who uses DuoApp gets their own login. That's deliberate: individual logins are what make timesheets, approvals and the audit trail meaningful — you always know who did what. This guide covers inviting people and choosing the right level of access for each.

Inviting someone

Go to Settings → Team and choose Invite. Enter the person's name and email, pick their role, and send. They'll get an email to set their own password and can sign in straight away — on the web app, the desktop app, or the mobile app on site.

Choosing the right role

Roles decide what a person can see and do. Rather than giving everyone everything, match the role to the job:

Admin / office — full access to projects, finance, approvals and settings. This is for the people running the business day to day.
Project manager — their own projects in full, including tasks, applications and documents, without company-wide settings.
Site / field — focused on tasks, timesheets, photos and quality sign-offs for the jobs they're on, via the mobile app.
Subcontractor — a deliberately narrow view of just the work, applications and documents that concern them.

// Rule of thumb

Give the least access that lets the job get done

Office staff: full access to finance and settings
PMs: full access to their own projects only
Site teams: tasks, timesheets and sign-offs on the mobile app
Subcontractors: just their works, applications and documents

You can widen access at any time — it's easier to start tight and open up than to claw permissions back.

Bringing subcontractors in

Subcontractors get their own restricted login, so they can submit applications, upload their certificates and see the works that involve them — without seeing your margins or other jobs. It keeps the back-and-forth in one place and means their compliance documents land where your document compliance checks can see them.

Removing access

When someone leaves, deactivate their login in Settings → Team. Their history stays intact in the audit trail — you keep the record of what they did — but they can no longer sign in. Nothing they created is lost.

// Related help