Skip to content

Account Setup

Once you’ve completed getting started, set up your workspace so your team can work alongside you.

  1. Go to Settings → Members.
  2. Click Invite member.
  3. Enter an email address and assign a role (Owner, Admin, Member, Viewer, or a custom role).
  4. Send the invitation.

Invited teammates receive an email with a signup link that expires in 7 days. By default, only Admins can send invitations — an Admin can widen that in Settings → Security if other roles should be able to invite too. You can invite several people at once; each recipient gets their own invitation and accepts it individually.

Unaccepted invites show as Pending in the Members list. From there you can resend one that expired or never arrived, or cancel one that’s no longer needed. If an invite doesn’t show up, have the person check spam before you resend — the signup link is single-use and expires after 7 days.

Open a member’s row and choose a new role from the menu — the change applies immediately. To remove someone, use the same menu and select Remove; they lose access right away. Anything they shared with the workspace stays behind; anything personal and unshared leaves with their account.

Model Match ships four built-in roles:

  • Owner — full control of the workspace. The only role that can transfer ownership or delete the workspace. Every workspace has exactly one.
  • Admin — manages people, plan, credits, security, branding, and integrations, but can’t transfer ownership or delete the workspace.
  • Member — uses the product day to day and manages their own personal settings; no workspace-wide control.
  • Viewer — read-only access to most areas.
FunctionOwnerAdminMemberViewer
Members & roles✅✅——
Teams✅✅——
Plan & billing✅✅——
Workspace credits & limits✅✅Own limit only—
Security, SSO & domains✅✅——
Audit log✅✅——
Branding & profile✅✅ViewView
API keys & webhooks✅✅Own onlyView
Connectors✅✅✅View
Transfer ownership✅———
Delete workspace✅———

Admins run the workspace day to day, but only the Owner can give it away or delete it. See Billing & plans for what the “Plan & billing” and “Workspace credits & limits” rows control.

If the built-in roles are too coarse, create a custom role and grant it exactly the permissions it needs. Permissions are grouped into three areas:

  • Organization & teams — view/update the organization, create, update, or delete teams, and (most sensitive) delete the organization itself
  • Access & security — invite members, cancel invitations, update permissions, create OAuth clients, export data
  • Billing & credits — view billing, manage billing, view credits, purchase credits

Set each permission independently from a dropdown next to it — changes save automatically and apply right away. Keep destructive permissions (deleting the organization or a team, updating permissions) restricted to Owners, and review role assignments whenever someone changes roles or leaves. Update permissions is itself sensitive — anyone holding it can change who holds every other permission on this list.

Teams group members inside a single workspace — by branch, region, pod, or however your organization is structured. Everyone on a team still shares the same plan, credits, and settings as the rest of the workspace; a team is an organizational grouping, not a billing or access boundary. If a group genuinely needs its own plan, billing, and data, use a separate workspace instead.

  1. Go to Settings → Teams.
  2. Click Create team.
  3. Name the team (and optionally give it an icon).
  4. Save.

Open a team to add or remove members, or to rename it or change its icon — changes apply everywhere the team appears. Adding someone to a team doesn’t change their workspace role, and deleting a team only removes the grouping: members stay in the workspace with the roles they already had. A member can belong to more than one team at a time.

Claiming your domain and turning on SSO is the single biggest step toward a secure, hands-off workspace.

  1. Go to Settings → Security.
  2. Add the verification record Model Match gives you to your company’s DNS.
  3. Return and verify once DNS has propagated.

Claiming a domain (for example yourcompany.com) proves your organization controls it, so Model Match can apply your chosen join policy to anyone signing up with a matching email. If you can’t edit DNS yourself, hand the verification token to whoever manages it. Domains can be unclaimed later if needed.

Once a domain is verified, choose how new signups with a matching email are handled:

  • Auto-join — added immediately; fastest onboarding, best for small trusted domains
  • Request access — held for Admin approval, giving a human a chance to verify
  • Invite only — no self-service entry; people join only through an explicit invitation

If people with your domain are landing in the workspace unexpectedly, your join policy is set to auto-join — switch it to request-access or invite-only to tighten entry.

Connect your identity provider so teammates sign in with your company’s existing credentials instead of a separate Model Match password. SSO is configured per-workspace from Settings → Security; claim your domain before setting it up.

Admins can restrict which sign-in methods are allowed — for example, requiring SSO as the only path in, so no one can fall back to a password.

When your join policy is Request access, incoming requests appear in the Security area for an Admin to approve or deny.

The audit log records activity across the workspace and is visible only to Admins and the Owner.

Two actions are restricted to the workspace Owner — not even an Admin can perform them — because they permanently change who controls the workspace or remove it entirely.

  1. As Owner, go to Settings → Members.
  2. Select Transfer ownership and choose the new Owner from the member list.
  3. Confirm.

The new Owner gets full control immediately; the previous Owner is typically left as an Admin unless the new Owner changes that. If you transfer ownership by mistake, contact support@modelmatch.com.

  1. As Owner, open the danger zone in Settings → Security.
  2. Request deletion.
  3. Confirm through the verification steps (this may include an email confirmation).

Deletion is permanent once the recovery window closes — every member loses access and workspace data is removed. You can cancel the deletion and restore the workspace during that window, but not after it expires. Deleting a workspace doesn’t affect subscriptions tied to any other workspace you belong to, since one person can be a member of more than one — see Billing & plans for subscription details.

Model Match can notify you when:

  • An agent on your watch list closes a new transaction
  • A loan officer you’re tracking changes companies
  • A saved search returns new matches

Configure delivery under Settings → Notifications (email, Slack, or in-app).

  • Market: the default geographic scope for new searches
  • Currency & date format: regional display settings
  • CRM sync: connect HubSpot or Salesforce for bi-directional contact sync