Before you start
- You need write access to Company users in Settings > Users & Roles.
- Your rollout companies must exist and be mapped to your PSA first. See Import companies.
- A Company access group must exist for the users. See Company access groups.
- Importing a user does not send an invitation.
Import PSA contacts in the connection
If your PSA sets up inside Launch Center, you can import contacts there. After you import or match at least one company, open the PSA’s Import or match users task under Connect your PSA. Other companies can wait, and you can return later to import more users.1
Select contacts
Use Import beside a contact, or tick contacts. Select current page selects the visible page, and you can then select all pages that match your filters. Select all with email selects every matching contact that has an email address.
2
Import them
Click Import selected. Choose the Company Role and review the import and skipped counts before you confirm.
Import Microsoft 365 users automatically
Instead of importing Microsoft 365 users by hand, anyone whose role can write Users settings can add an access rule with the action Import Microsoft 365 users (branch preview), for example for everyone with a given license or in a given department. After each Microsoft 365 sync, matching people without a portal user become Company users in their company with the rule’s role. No invitation is sent. Preview the rule first to see who it creates. See Set access rules.Review and add Company users
1
Open Company Users
Go to Settings > Users & Roles and open Company Users. In Launch Center, Import and invite client users in the Portal checklist opens the same tab in a new browser tab.
2
Review who is already there
Use the company selector and the table filters to look at the users for one company. Check each person’s company, email, active state, and Permissions Group before you import again.
3
Import contacts from a provider
Click Import. The Bulk Import Company Users dialog lists your connected providers. Choose your PSA or Microsoft 365, then pick the contacts and the access group, and confirm. Bulk import creates users across all companies in your organization, so check your company mappings first. Follow Import Users for each field.
4
Or add one user by hand
Go to Settings > Companies, open the company, and open its Users tab. Click Add User, fill in the person’s details, choose a Permissions Group, and save.
5
Check the saved user
Click the user’s name. In Edit Company User, confirm the company, email, status, and Permissions Group. Where a provider sync manages roles, also review its contact-type rules, company defaults and integration defaults.
6
Repeat for each rollout company
Do the same for every company you plan to launch.

Filter Company users by name, email and account type before you review individual records.
Send invitations when you are ready
1
Select the users
On Company Users, tick the users you want to invite.
2
Send the email
Open Actions and click Send Welcome Email, or open a user’s row menu. Confirm in the dialog. This sends a real email, so do it only when the pilot is ready.
Check launch progress
In Launch Center, the Portal checklist item Import and invite client users counts client users who are active or invited, and ticks itself once there is at least one. That count does not prove every rollout company has a ready user. Check that each company you plan to launch has an active Company user with the right company and access group. A staged contact, an inactive user, or an unassigned user is not ready for access.Troubleshooting
Frequently asked questions
Does a staged provider contact count as a ready Company user?
Does a staged provider contact count as a ready Company user?
No. You need an active portal Company user with a company and an access role.
Does one active user cover all rollout companies?
Does one active user cover all rollout companies?
No. Review the users and access for each company you plan to launch.
Does importing a contact send an invitation?
Does importing a contact send an invitation?
No. Send invitations separately. This includes users created by a Microsoft 365 import rule.
Do Team Roles replace the access group?
Do Team Roles replace the access group?
No. The access group controls permissions. Team Roles assign MSP staff to a company.