Settings: Organization & Admin Controls

Manage identity, members, roles, notifications, SSO, billing, and workspace email from the settings workspace.

This page covers the organization and admin half of Settings: company identity, member lifecycle, role controls, outbound communication routing, enterprise access, billing, and workspace email.

Settings overview showing grouped cards for organization, invoicing, branding, and automation controls.

Typical Workflow

  1. Start from the settings overview or sidebar.
  2. Make one organization-level change at a time.
  3. Save and verify the part of the product that depends on the setting.

Used together, these settings keep the workspace identity, access model, and communication configuration aligned.

General

Settings overview showing grouped cards for organization, invoicing, branding, and automation controls.

Use Settings → General for:

  • company logo URL
  • organization name, public name, internal name
  • domain, legal name, trade name, website
  • billing email, phone, country, timezone, default currency
  • address fields
  • destructive organization deletion with impact summary

Use this page when the company identity itself changed or when invoice defaults are wrong because the organization profile is outdated.

Members

Members workspace showing active teammates, roles, last-active context, and quick access to membership actions.

Use Settings → Members to:

  • invite members
  • search active members and invitations
  • update non-owner roles
  • transfer ownership explicitly
  • remove members with ownership-impact review
  • review pending, accepted, revoked, and expired invite history

Roles

Roles settings showing role cards and permission groups for custom access control.

Use Settings → Roles to:

  • create roles
  • edit role definitions
  • review built-in versus custom roles
  • create or delete non-built-in permissions

This is the RBAC authoring page for the workspace.

Notifications

Settings notifications page showing reply routing, archive BCC, reminder tone, and user notification preferences.

Use Settings → Notifications to manage:

  • reply-to email
  • archive BCC email
  • default reminder tone
  • user-notification preferences exposed from workspace settings

Use this page when team-level email routing or shared notification defaults need adjustment.

SSO

SSO settings showing enterprise status, company-domain controls, join policy settings, and directory sync state.

Use Settings → SSO for:

  • Require SSO
  • domain join policy
  • default JIT role
  • opening the SSO setup portal
  • adding, verifying, and removing approved company domains
  • directory sync review and reconcile

This page should be treated as owner-only infrastructure work.

Billing

Use Settings → Billing to review:

  • current plan
  • plan status
  • cancel-at-period-end state
  • current-period end date
  • billing portal access through Stripe

If the workspace is still on a free plan, the billing portal can be unavailable until subscription state exists.

Email

Workspace email settings showing enablement, inbound address, sending domain, aliases, and archive addresses.

Use Settings → Email to manage:

  • workspace email enablement
  • inbound forwarding address
  • customer service email and sender name
  • sending domain
  • DNS verification records
  • alternate send-as or reply-capable addresses
  • archive addresses

These email settings affect customer-facing routing immediately and should be verified from a real send path after changes.

Permissions and state behavior

  • SSO management is owner-gated
  • ownership transfer is a dedicated member action, not a normal role edit
  • invite delivery can fail even when the invite record exists, so check delivery state before assuming the invite was received
  • email settings can appear saved while DNS or sending-domain verification is still incomplete
  • organization deletion is a destructive workspace-wide action and should be treated separately from member removal

Troubleshooting

A teammate was invited but never received access

Check invite history and delivery state in Members. Email failed and Pending send are distinct from Accepted.

A user can sign in but is not joining the right workspace

Review SSO join policy and approved domains. Domain match behavior is configurable and can be intentionally conservative.

Reply routing still looks wrong after changing workspace email

Check Notifications and Email together. Reply-to, sending domain, aliases, and archive BCC solve different pieces of the outbound path.

The billing portal button is unavailable

Review plan state. Free-plan workspaces may not have a billing portal session to open yet.

We use cookies to improve your experience, analyze traffic, and personalize content.