User & Tenant Administration

The account menu in the top right takes you to two separate areas: Profile for your personal settings, and Tenant Management for everything that concerns the whole tenant — tenant details, subscription, users, and the audit log. There's no separate administration page per workspace: workspaces are administered exclusively through Tenant Management. (What Tenant and Workspace actually mean: Glossary.)

Inviting colleagues

In Tenant Management, on the Users tab, Invite user opens a dialog with three required fields — email address, first name, last name — followed by the role selection: Tenant roles apply immediately to the whole tenant, Workspace roles you assign to individual workspaces (currently offering "Default Workspace" as the only option). Both can already be combined while inviting, before you confirm with Send invitation.

How many users your tenant may have in total depends on your plan — under Subscription & Usage you see, for workspaces, gateways, sensors, and users, how much you're already using and how much is available in total. What these numbers mean and how a reached limit shows up: Limits.

Roles at a glance

Seven roles are available, in two scopes. A user can hold several of them at the same time.

Tenant roles — apply to the entire tenant:

Tenant Admin — full administrative control over tenant settings, workspaces, and users.
Billing Manager — manages the tenant's billing, subscription, and invoices.

Workspace roles — each applies to a single workspace:

Workspace Admin — manages a specific workspace's settings, members, and role assignments.
Data Engineer — manages datapoints, visualizations, and dashboards within a workspace.
Data Analyst — read access to a workspace's datapoints, visualizations, and dashboards.
Asset Manager — manages assets within a workspace.
Asset Viewer — read access to assets and data within a workspace.

Roles can be changed at any time afterward: in the user list, Role Assignments in a row's Actions menu opens the same dialog as inviting, ending with Save.

How workspaces relate to the tenant

The tenant is the administrative umbrella around all of its workspaces. You grant access to an individual workspace exclusively through that workspace's roles in Tenant Management, where every existing workspace appears as its own section — a separate administration page for a single workspace doesn't exist. Tenant roles like Tenant Admin or Billing Manager are independent of that: they apply tenant-wide, no matter how many workspaces exist.

Removing someone

The Actions menu on a row in the user list offers four entries:

View details — name, email, username, user ID, plus creation and verification date, informational only.
Role Assignments — see above.
Deactivate User
Delete User

Tenant Danger Zone

In Tenant Management, the Danger Zone tab contains irreversible and destructive actions for the entire tenant — separate from the personal danger zone under Profile (see below). It currently holds a single entry: Delete Tenant, with the description "Permanently delete this tenant and all associated data. This action cannot be undone.", and a button of the same name. The confirmation behind it was not opened, since it sets an irreversible action in motion. What that means for your data and how to export what you want to keep beforehand: Data and Privacy.

Your own profile and password

Under Profile in the account menu, you manage your personal settings, spread across five tabs:

Profile — avatar, first name, last name, and an optional bio; Save Changes applies them.
Preferences — interface language and timezone for notifications and schedules.
Security / Two-Factor Authentication — status of TOTP-based two-factor authentication and a setup wizard, if it isn't active yet.
Sessions — all active sessions with device, IP address, and sign-in time; every session except the current one carries its own Sign out button, and Sign out all additionally signs out all sessions except the current one at once.
Danger Zone — signing out of this device, and the final, irreversible deletion of your own account.

On the Security / Two-Factor Authentication tab, below the two-factor setup, you'll find the Change password section with three fields — Current password, New password, Confirm new password — and a button of the same name. The Forgot your password? link on the login page still exists and remains the way to reset a password without signing in.

Audit Log

Under Audit Log, Tenant Management keeps a searchable log of all account activity, filterable by status and time range, exportable and paginated.