Team & plan — workspace settings.
The admin control panel. Invite teammates, set roles, manage plan tier, configure SSO, review audit logs. The screen everyone uses occasionally and admins live in.
TL;DR
4 sections: Members (invite, roles, remove) · Plan (current tier, usage meters, upgrade) · SSO & identity (Google Workspace, Okta, custom SAML) · Audit log (every action by every user, 90d retention). Admins only — non-admins see a read-only version.
01Members management
Invite by email or by SSO-domain auto-provisioning (Pro+). Each invite triggers an email + waits up to 14 days before expiring.
Remove members instantly. Removed members' data (their briefs, Orbit list, saved searches) stays in the workspace — admin can reassign or archive.
02Roles and permissions
| Role | Can do | Can't do |
|---|---|---|
| Admin | Everything | — |
| Manager | Edit ICP, manage saved searches/rules, see all team activity | Manage billing, invite admins |
| Member | Brief, push to CRM, use Orbit, see own activity | Edit ICP, change plan, see other members' data |
| Viewer | Read-only access to briefs shared with them | Generate briefs, push anything |
03Plan and usage
Shows current tier (Free / Pro / Company) with usage meters: briefs this month, Orbit slots used, custom bots active, saved searches count.
Upgrade is one-click for self-serve plans. Company-tier upgrades route to sales-led flow. Downgrade is allowed at any time — data is retained, you just lose feature access until you re-upgrade.
04SSO and identity
Three SSO options:
- Google Workspace — free for all tiers
- Okta — Pro+
- Custom SAML — Company tier
SSO can be enforced (everyone must use SSO) or optional (mix of SSO + password). Enforcement is one toggle.
05Audit log
Every action by every user, 90 days retention (extendable to 1 year on Company tier). Filter by user, action type, date range.
Common queries: "who pushed which briefs to CRM," "who removed a member," "who changed the ICP rubric." Audit logs are exportable to CSV.