The user will be notified via e-mail that he has gained access to this risk assessment. You can only invite users that are already registered as users for your organisation in the OiRA organisation settings.