just as a general follow-up: We solved the problem by private mail.
This was indeed the email verification component of AccountManager. IMHO this functionality is a bit stupid - if a user (team member) enters a new email address (or is created with one), he looses all privileges until he verified his email address.
fs
smime.p7s
Description: S/MIME Cryptographic Signature
