Questions about company administration

Yes. Give them a role with the function they need, such as maintaining branches. Company administration shows only the functions their roles grant.

Yes. The role page has Permissions, Application access and Data scope. Application tabs let you choose the menus the role reaches in each application.

Maintain users, reporting lines, branches, offices and branch holidays at company level. They apply across the company's applications. User names need to be unique only within the company.

Company administrators can create hand-built applications with a code and a name. Every company also has a Main application. AI Core adds an application for each blueprint it builds. It shows as Draft until it is published. The application register brings these applications together with their current statuses.

The platform sets which layers may have separate stores. Within that policy, the company administrator chooses stores for each application. Records, documents, files, logs and cache can use company stores or their own stores. Only the affected application pauses during a move.

The application register shows its status as Retired, alongside Draft and Published applications. Company administrators can retire hand-built applications they no longer need.

Yes. Company AI keys serve only your company, and their values are never shown. A wrong company key fails rather than silently switching. Each AI call records whose key it used. Platform keys are available only where the platform allows your company to use them.

Company administrators choose the applications each API client may reach. A calling system is limited to those applications. Manage clients in Company administration, alongside company sign-in settings. Integration scope separately controls which applications may use each company integration.

Only through an audited session with a stated reason. Platform operators use a separate console and sign-in address. Sensitive actions require a fresh PIN or authenticator code. Company administrators continue to manage company settings and application choices within the platform's limits.

Only company administrators manage single sign-on, two-factor policy and API clients. Single sign-on supports OpenID Connect, Microsoft Entra ID and SAML 2.0. Two-factor policy can be off, limited to company administrators, or applied to everyone. OTP settings and activity logs support administration.