Initial team management: add users, revoke permission