Administration

This section is for the people who run a Hermetry organisation: its Owners and Admins. It covers who can sign in and what they may do, how the organisation looks and where it is reached, what your plan includes and how it is billed, and how you leave. Security topics such as two-factor sign-in, single sign-on and the device certificate authority are in Security.

Organisation and people

Task	Page
Understand what an organisation is, its status and what happens when it is suspended or deleted	Organisations
Invite people, change roles, suspend or remove members, hand over ownership	Users and roles
Give extra rights with groups, including the ready-made IoT groups	Groups and permissions
Add attribute-based rules on top of roles	Access policies
Set your own name, language, time zone and formats	Your profile, language and time zone

Settings, look and addresses

Task	Page
Find a setting and see where its value comes from	Organisation settings and setting levels
Put your logo, colours and name on the app and the sign-in pages	Branding
Use your free address or connect your own domain	Web addresses and custom domains
See where your data is kept	Regions and data residency

Oversight and security

Task	Page
See who did what, export the log, check it has not been changed	Audit log
Two-factor sign-in, passkeys, single sign-on, sessions and lockout	Sign-in security

Plan, usage and billing

Task	Page
Understand the IoT tiers and what each limit means	Plans and the IoT add-on
Read your current plan, its end date and your modules	Your subscription and entitlements
Follow message counts and quota warnings	Usage and quotas
Pay, change or cancel a plan, use a discount code	Payment and plan changes
Take your data with you and close the organisation	Export your data and close your organisation

The three built-in roles

Every member has exactly one built-in role:

Role	In short
Owner	Full control, including owner-only actions: managing other owners, ownership transfer, deleting the organisation, buying or changing the plan, raw device commands and firmware signing keys.
Admin	Manages members, settings, devices, credentials, profiles, alarm rules, flows, firmware and shared dashboards.
User	Works with the plant day to day: views devices, dashboards and alarms, acknowledges alarms, sends basic commands, builds personal dashboards.

Each permission has a minimum role. Groups can add permissions on top of a role, and access policies can narrow them. See Users and roles and Groups and permissions.

Where the pages are

In the menu, the Organisation group holds Members, Domains, Branding, Settings and Plan & Billing. The Developer group holds Webhooks and API Keys. Members with the User role do not see the team, billing and developer pages. Some pages have no menu item of their own and open from Settings or by their address, for example the audit log at /admin/audit-logs and the usage page at /admin/usage.