An admin should be able to type an email address to send an invite to a new person that allows them to get access to that ACR without further approval. Could be that an account and temp password are set up and sent. Could be that the user must create the account, but the permissions for that user are preset, etc. Could/should be a separate permission so that invites could be allowed for normal users as well as admins...

Final design for how it works should be circulated to the team before coding.