Invite from the organization dashboard by email address, choosing the role the person should hold when they arrive. They receive a link that is valid for a limited window and can be used once.
A seat is counted when the invitation is accepted, not when it is sent. You can invite more people than you have seats for; the ceiling is checked as each one arrives, and the person who would exceed it is told which plan raises it.
If an invitation expires
Send a new one. An expired link cannot be revived, deliberately — a link that outlives its intended window is the most common way someone ends up in an organization they were never meant to join.
Letting your colleagues join without an invitation
In a Kemble Work workspace, an admin can approve your company’s email domain under Workspace settings › Members. It is off until an admin turns it on. A domain counts once it is verified for single sign-on or is the admin’s own confirmed address, and a public mail service never counts. Anybody who confirms an address at an approved domain then finds Join in the workspace menu and arrives as a member, never a guest.