Max active invitations per user
- Type
- invitation_max_active_per_user
- Category
- Invitations
- Enforced atWhen this policy is checked: while someone tries to open, while they create or change an invitation or hold, on a membership change or background sweep (lifecycle), or after a denial (record only).
- Authoring-time
- TiersWhere an admin can set this policy: the whole organization, one integration, or the physical device when the connector supports a device steward.
- OrgIntegrationDevice
- EnforcementEnforcement modes this type accepts. Enforce applies the row. Require approval (user sharing only) opens an admin approval inbox instead of blocking.
- Enforce
- DefaultWhat happens when no row of this type is configured.
- Not configured — no cap on how many invitations one person may keep active.
The author cannot have more than max enabled, unrevoked invitations that are still in force. Create is rejected once the cap is reached.
When it is enforced
Evaluated when someone creates or updates an invitation, hold, or share. Requests that would exceed the limit are rejected — they are not silently rewritten.
Where to set it
Settings → Policies (org), the integration Policies tab, or — on PalGate — the device steward Policies tab.
Policies never grant access. See thepolicies architecture guidefor how org, integration, and device tiers combine.
Arguments
The config object on create/update. Row fields outsideconfig are enforcement (this type acceptsenforce; any other value is rejected with 400), enabled (disabled rows never apply), and capability.
| Name | Type | Required | Values | Description |
|---|---|---|---|---|
| max | integer | Yes | — | Maximum concurrent active invitations per author. Integer from 1 through 31536000. |
How overlapping rows combine
Minimum of max across applicable rows. Reject, do not clamp.
Example
A resident with five active invitations cannot create a sixth until one expires or is revoked.
{ "max": 5}Integrations
This type is documented on these connectors:
- Home Assistant (home_assistant)
- KNX (knx)
- MQTT (mqtt)
- PalGate Cloud (palgate_cloud)
- Shelly Cloud (shelly_cloud)
- Shelly Websocket (shelly_websocket)
- Tasmota (tasmota)
- Virtual Access (virtual_access)
- Virtual Demo Devices (virtual_demo)
- Waveshare (waveshare)
Related
- Policy catalog
- Policies architecture guide
- Max invitation uses (invitation_max_uses)
- Require invitation expiry (invitation_require_expiry)
Typed configuration
Section titled “Typed configuration”The OpenAPI contract names this object InvitationCountLimitPolicyConfig:
{ "max": 5, "output": "main"}max must be positive. Multiple applicable rows combine by taking the smallest limit.