The Admin module is where the organization itself is configured.
What is here
- ›Dashboard and audit log: what has happened across the organization.
- ›Users and roles: membership, roles, module levels, access requests.
- ›Permission walls: refused actions and why.
- ›Organization settings: identity, branding, defaults.
- ›Security: authentication controls including MFA, and SAML SSO on the Business plan.
- ›Data protection: encryption of sensitive fields, retention, and export.
- ›Billing and plans: subscription, credits, invoices.
- ›API keys: keys for the public API. See API getting started.
- ›Compliance (absorbed section): policies, requirements, training, and audits.
Security practices worth adopting
1
Require MFA for everyone with admin access, at minimum.
2
Keep owner and admin counts small and reviewed.
3
Review the audit log periodically rather than only after an incident.
4
Rotate API keys on a schedule and revoke ones nobody claims.
5
Export a backup before major structural changes.
Data protection
Sensitive personal fields are encrypted at rest. Data retention and purge policies are configurable, and organization export produces a full backup you control.
Important: Anyone who can create API keys can grant programmatic access to your organization's data. Treat key creation as an admin-level action and audit the key list as carefully as the user list.