They'll receive an email with a link to join your team.
Define a new role for your team with custom permissions.
When set, this role cannot execute actions without approval from the selected role.