Send an invitation email. The recipient sets their own password and joins your tenant with the pre-selected role and permissions — no payment, no extra verification.