Description

Ensure the team's Pending Invitations list does not contain old invitations that were never accepted, including invitations that have already expired. Invitations that are no longer needed should be revoked, and the list should be reviewed regularly as part of access reviews.

Rationale

Old invitations are often sent to the wrong address, to people who have since left, or to contractors whose work has ended. Leaving them in place clutters access reviews and makes it harder to see who should really have access. Removing stale invitations keeps the team's access list accurate and easy to audit.

Impact

  • Keeps the team's access list accurate

  • Makes access reviews simpler

  • Invited users who still need access must be re-invited

Default Value

Invitations must be accepted within 72 hours. After that they show as expired in the Pending Invitations tab until they are removed.

Pre-Requisites

  • Team Owner role

Test Plan

  1. Sign in to Vercel at https://vercel.com.

  2. Select your team from the team switcher.

  3. Open Settings in the sidebar and select Members.

  4. Open the Pending Invitations tab.

  5. Check for invitations older than 30 days, and for any that show as expired.

  6. If any are found, follow the implementation steps.

Implementation Steps

  1. Sign in to Vercel at https://vercel.com.

  2. Select your team from the team switcher.

  3. Open Settings in the sidebar and select Members.

  4. Open the Pending Invitations tab.

  5. For each stale or expired invitation, open its menu and revoke or delete it.

  6. Re-invite anyone who still needs access.

Backout Plan

  1. Sign in to Vercel at https://vercel.com.

  2. Select your team from the team switcher.

  3. Open Settings in the sidebar and select Members.

  4. Select Invite and send a new invitation to the user, with the correct role.

Reference