| Integrations | ✅ Manage | ❌ | ❌ | ❌ |
Safety Officer — Additional permission for any Admin/Manager:
- • Clear safety latches
- • Authorise emergency spend
- • Receive safety alert SMS
Inviting Team Members
1. Settings → Users → Invite User
2. Enter email, select role
3. Optional: Assign to specific properties/portfolios (Manager only)
4. Send invite → User receives magic link email
Bulk invite: CSV upload (email, role, property_ids)
Managing Existing Users
Settings → Users:
- • Search/filter by name, email, role, status
- • Edit: Change role, property assignments
- • Deactivate: Immediate access revocation, data retained
- • Reactivate: Within 30 days, full restoration
- • Remove: Permanent (30 days after deactivation)
Audit log: All user changes logged (who, what, when).
Property-Level Access (Managers)
Managers can be restricted to specific properties:
1. Edit user → Property Access
2. Select "Specific properties"
3. Choose from list or upload CSV
4. User only sees repairs/properties in their scope
Admins always have full access.
Contractor Portal Access
Contractors do not count as workspace users:
- • Added via Settings → Contractors
- • Access via separate contractor portal
- • No access to workspace dashboard, reports, settings
- • Only see assigned repairs
Single Sign-On (Enterprise)
Supported providers: Okta, Azure AD (Entra ID), Google Workspace, OneLogin, Ping Identity
Setup:
1. Settings → Security → SSO → Configure
2. Enter provider metadata / upload XML
3. Map attributes: email, first_name, last_name, role
4. Test with test user
5. Enforce SSO (optional — disables magic link)
SCIM provisioning (Okta, Azure AD):
- • Auto-create/update/deactivate users
- • Sync groups → roles
- • Real-time deprovisioning
Session Management
- • Session timeout: 8 hours (configurable 1–24h)
- • Concurrent sessions: 5 per user (configurable)
- • Force logout: Admin can revoke all sessions for a user
- • Device trust: Remember device 30 days (optional)
Audit Trail
Settings → Security → Audit Log:
- • All user actions (login, repair changes, settings changes, exports)
- • Filter by user, date, action type, resource
- • Export for compliance (CSV, JSON)
- • Retention: 7 years (configurable 1–10)
Next Steps
---
Pre-launch documentation. Features and workflows may change before general availability.