diff --git a/src/routes/idaa/(idaa)/video_conferences/+page.svelte b/src/routes/idaa/(idaa)/video_conferences/+page.svelte
index 3bc912ec..056b753a 100644
--- a/src/routes/idaa/(idaa)/video_conferences/+page.svelte
+++ b/src/routes/idaa/(idaa)/video_conferences/+page.svelte
@@ -894,10 +894,12 @@ async function init_jitsi() {
             // Explicit toolbar whitelist — omitting 'embedmeeting' entirely.
             // "Embed Meeting" exposes the Jitsi host/room URL and must never appear
             // for IDAA users (authenticated or not) — privacy requirement.
+            // 'invite' is only included for moderators — regular attendees should not
+            // be able to invite others directly; that is the meeting organizer's role.
             toolbarButtons: [
                 'camera', 'chat', 'closedcaptions', 'desktop', 'download',
                 'etherpad', 'feedback', 'filmstrip', 'fullscreen', 'hangup',
-                'help', 'invite', 'livestreaming', 'microphone',
+                'help', ...(is_moderator ? ['invite'] : []), 'livestreaming', 'microphone',
                 'mute-everyone', 'mute-video-everyone', 'participants-pane',
                 'profile', 'raisehand', 'recording', 'security',
                 'select-background', 'settings', 'shareaudio', 'sharedvideo',