You can invite teammates from Settings, Team, Invite. There is no per-seat cost; the price is per vetted candidate, not per user.
Roles are assigned at invite time and editable later. A teammate without an assigned role cannot read any candidate data.
You can invite a domain that is not your own (e.g. an external recruiter or a hiring partner), but the invite is flagged in the audit log and the invited user is rate-limited to two active roles. SSO-enforced workspaces cannot invite outside the SSO domain.
A pending invite expires after seven days. The invite link is single-use and tied to the email address it was sent to; forwarding the link to a different address will fail at sign-in. Re-issuing a fresh invite is one click and does not consume any prior invite slot.
What to do next: invite the hiring manager who will read the finalist cards, and keep the recruiter role for whoever schedules the human rounds.