Who's in your organisation, and what they can reach
Invite people, group them into teams and give each the access they need. Decide what a sign-in needs, and see who signed in and who changed what.
Everything an admin does, from the first invite to the audit log
Bring your people in, decide what they reach, and set how they sign in.
Invite by email, from CSV or with a link
Invite one person with their role, title, department and groups, or up to 200 at once from CSV. People from outside join as guests, with access that ends when you choose.
Groups and roles that fit your teams
Members get the higher of their own role and their groups'. Custom roles add just the permissions someone needs, and Check access says who can reach what, and why.
Decide which apps each team reaches
Turn each app on for everyone, give it to chosen groups, or turn it off. See every key and AI client acting in your organisation, and revoke a key or disconnect a client at once.
Decide what it takes to sign in
Require a passkey or two-step sign-in, choose the methods allowed and how long a sign-in lasts. A grace period gives members time to set up.
See who signed in, and who changed what
Recommendations point to what needs fixing. Sign-in logs show each sign-in and failed attempt with its approximate place and device, and the audit log records who changed what.
- built-in roles: owner, admin, developer and viewer, each listing every permission it holds
- 4
- built-in roles: owner, admin, developer and viewer, each listing every permission it holds
- people invited at once from CSV, each line sent or reported on its own
- 200
- people invited at once from CSV, each line sent or reported on its own
- seconds at most for a block to reach open apps, the API, AI clients and the person's keys
- 30
- seconds at most for a block to reach open apps, the API, AI clients and the person's keys
Everything you need to run your organisation's access
Users and guests
Invite people by email, from CSV or with a link, give guests access that ends, and block or remove people at once.
Groups and custom roles
Groups give their members a role, custom roles and apps. Custom roles add single permissions.
Check access
Who can reach an app or hold a permission, and the layer that decides it.
App access
Each app on for everyone, for chosen groups, or off, applied within seconds.
Sign-in policy
Require a passkey or two-step sign-in, with a grace period to set up.
Sign-in logs and audit log
Every sign-in and failed attempt, and who changed what, when and from where.
See Tenant with your organisation
Tell us how you manage people and access today, and we'll show you Tenant set up the same way.
- A walk through invites, groups and roles
- Setting a sign-in policy with a grace period
- Questions about plans for larger teams
We use what you send to reply to you, as our Privacy Policy describes.
The form opens your email app with the message ready; nothing reaches us until you send it there.
Run your organisation's access in Tenant
Every Business plan includes it, for the owners and admins who look after your people and how they sign in.