Invitations and the workspace code create pending roles. Confirm mailbox ownership to activate them.