Most of what your organisation can configure is reached from one page: Settings in the Organisation part of the menu (address /admin/settings), titled Organization Settings. This page explains its areas, who may change them, and the setting levels that decide where a module’s accounts and connection settings come from.
The settings page
The page shows cards in sections. You only see a card when its module is on for your organisation and you may open it, so two members can see different cards.
| Section | Cards you may see |
|---|---|
| Organization | General (name, description, contact details, language, time zone, date and time formats), Languages, Branding, Data Export, Member Preferences, Profiles |
| Integrations | Email, SMS, Storage, and other providers your plan includes |
| Access & Security | Access Control, Access Policies, Authentication & SSO, Sign-in Policy, SCIM Provisioning, Security, Notifications, Push Notifications, In-app Notifications |
| Modules | Members, Domains, Webhooks, API Keys, and settings links of other modules, such as Device Certificates and AI firewall |
Below the cards, owners see the Danger Zone with Delete Organization. See Export your data and close your organisation.
Many module pages also have a settings button in their header, for example Member settings on Members and Usage settings on Usage.
General
Settings > General: “Organization identity, contact details, and locale”.
| Card | Fields |
|---|---|
| Organization | Organization Name, Description |
| Contact Information | Contact Email, Contact Phone, Address |
| Regional Settings | Language, Timezone, Date Format, Time Format (24-hour (14:30) or 12-hour (2:30 PM)) |
A new organisation starts with English, UTC, YYYY-MM-DD and HH:mm. These are the organisation’s defaults; each member can choose their own language, time zone and formats. See Your profile, language and time zone.
Member Preferences sets what a member sees until they choose: Default theme (Light, Dark, Follow the device), Default date format, Default time format, Default number format (for example 1,234.56 or 1.234,56), Default first day of the week and Default measurement system (Metric or Imperial).
Who may change what
| Area | Minimum role |
|---|---|
| Most settings | Admin |
| Sign-in Policy (two-step verification for everyone, IP lists), Default Member Role, approval of sensitive member changes, SAML, access policies, deleting the organisation | Owner |
When a save is refused, the page says why. Some settings refuse values that would lock you out: for example an IP allow list that does not include your own address is not saved.
Setting levels
Some modules talk to outside services: e-mail, SMS, storage and similar. For each of them Hermetry decides where its accounts and connection settings come from. This is the module’s setting level:
| Level | What it means for you |
|---|---|
| Provided by the platform | Hermetry runs the module with its own accounts. Its connection settings are not shown to you, and your use counts against your plan. |
| Tenant’s own | The module uses only the accounts and settings you add. Until you add them, it does not work. |
| Tenant’s own, else the platform’s | The platform’s settings serve you until you add your own. |
The settings page of such a module tells you which level applies, with one of these notices:
| Notice | Meaning |
|---|---|
| Provided by the platform | “The platform runs this module for you, so its accounts and connection settings are not shown here. Your use counts against your plan.” If you saved settings earlier: “The settings you saved earlier are kept, but not used.” |
| Your own settings | “This module uses only the accounts and settings you add here. Until you add them, it does not work.” |
| The platform’s settings serve you | “Until you add your own settings here, this module uses the platform’s, and your use counts against your plan. Saving any of these settings switches the whole group to yours, so fill in all of them.” |
| Your own settings are in use | “This module uses the settings you added here. Clear all of them to go back to the platform’s.” |
The level is chosen by Hermetry, for all organisations or for yours. You cannot change it yourself. If you need your own e-mail sender or SMS account and the module is Provided by the platform, contact us.
Note
On a Tenant’s own, else the platform’s module, saving even one field switches the whole group to your settings. Fill in every field of the group at once, or the module stops working until you do.
Secrets in settings
Passwords, API secrets and similar fields are stored encrypted and are never shown again after saving. To change one, type the new value; leave the field empty to keep the stored one.
Changes are audited
Every settings change writes a setting.* or tenant_setting.changed row to the audit log, with the key that changed. Secret values are never logged. See Audit log.