diff --git a/app/main/views/manage_users.py b/app/main/views/manage_users.py
index 4f552731c..ce95e7011 100644
--- a/app/main/views/manage_users.py
+++ b/app/main/views/manage_users.py
@@ -60,7 +60,9 @@ def invite_user(service_id):
         # view_activity is a default role to be added to all users.
         # All users will have at minimum view_activity to allow users to see notifications,
         # templates, team members but no update privileges
-        permissions = ','.join(role for role in roles.keys() if request.form.get(role) == 'y').join('view_activity')
+        selected_permissions = [role for role in sorted(roles.keys()) if request.form.get(role) == 'y']
+        selected_permissions.append('view_activity')
+        permissions = ','.join(selected_permissions)
         invited_user = invite_api_client.create_invite(
             current_user.id,
             service_id,
diff --git a/app/templates/admin_template.html b/app/templates/admin_template.html
index a371476db..ea680fb88 100644
--- a/app/templates/admin_template.html
+++ b/app/templates/admin_template.html
@@ -79,7 +79,11 @@
         </div>
         <div class="column-one-third">
           <h2>About</h2>
-          <a href="{{ url_for("main.help") }}">Help</a>
+          <ul>
+            <li><a href="{{ url_for("main.help") }}">Help</a></li>
+            <li><a href="{{ url_for("main.terms") }}">Terms of use</a></li>
+            <li><a href="{{ url_for("main.cookies") }}">Cookies</a></li>
+          </ul>
         </div>
         <div class="column-one-third">
           <h2>Developers</h2>
@@ -92,8 +96,6 @@
 
 {% block footer_support_links %}
   <nav class="footer-nav">
-    <a href="{{ url_for("main.terms") }}">Terms of use</a>
-    <a href="{{ url_for("main.cookies") }}">Cookies</a>
     Built by the <a href="https://www.gov.uk/government/organisations/government-digital-service">Government Digital Service</a>
   </nav>
 {% endblock %}
diff --git a/tests/app/main/views/test_manage_users.py b/tests/app/main/views/test_manage_users.py
index 0e8100882..92c4f0686 100644
--- a/tests/app/main/views/test_manage_users.py
+++ b/tests/app/main/views/test_manage_users.py
@@ -161,6 +161,11 @@ def test_invite_user(
         assert page.h1.string.strip() == 'Manage team'
         flash_banner = page.find('div', class_='banner-default-with-tick').string.strip()
         assert flash_banner == 'Invite sent to test@example.gov.uk'
+        excpected_permissions = 'manage_api_keys,manage_service,send_messages,view_activity'
+        app.invite_api_client.create_invite.assert_called_once_with(sample_invite['from_user'],
+                                                                    sample_invite['service'],
+                                                                    email_address,
+                                                                    excpected_permissions)
 
 
 def test_cancel_invited_user_cancels_user_invitations(app_,