Team & settings
Open Settings at the bottom of the side navigation. It has four tabs: Organisation, Team, Integrations and Account.
Organisation
Section titled “Organisation”Company profile
Section titled “Company profile”- Company name and details.
- Logo upload. Your logo appears on generated policy PDFs and reports.
Plan & billing
Section titled “Plan & billing”Shows your current plan. On a trial it shows how many days are left, for example Free trial — 9 days remaining. Choose a plan → (or Change plan → once you’re subscribed) opens the plan selector, where you can take the whole platform or just the part you need, month to month. Everyone in the organisation can see this panel.
Nothing is charged automatically during the trial. See Getting started for how the trial works.
Data classification and sites
Section titled “Data classification and sites”Data classification and sites holds two lists your assets refer to:
- Classification levels: start from a preset taken from the framework guides (a standard four-level scheme, Qatar NIA C0–C4, Saudi Arabia NDMO as referenced by NCA, or UAE Information Assurance), then rename, describe or add levels. If you switch to a different preset, assets already classified move to the level with the same rank, so nothing silently loses its classification. A level that’s in use can’t be removed until its assets are reclassified.
- Sites: your offices and data centres. If your assets and people already list locations, the panel offers to turn them into sites and assigns matching assets. Cloud regions such as
eu-west-2are left unticked, because a cloud region isn’t a site.
Team — inviting colleagues and roles
Section titled “Team — inviting colleagues and roles”Invite the people who’ll use the platform. This is separate from your people directory, which lists everyone in your organisation whether or not they log in.
- Go to Settings → Team.
- Enter a colleague’s email and choose a role.
- Click Send Invite. They receive an email with a link to join.
Verify your email first. You can’t send or resend invitations until your own email address is verified. If the button is greyed out, use the verification banner at the top of the page.
| Role | Can do |
|---|---|
| Admin | Full access: can invite and remove users, manage billing, and use every module |
| Security Lead | Can run the compliance wizard, generate policies and manage controls. Can’t manage billing or users |
| Viewer | Read‑only access to dashboards, vaults and reports. Can’t create or edit |
The person who created the organisation is its owner, with the same access as an Admin.
Give people the least privilege they need. Most users should be Security Lead or Viewer, with Admin kept for those who run the account.
Pending invitations
Section titled “Pending invitations”Invitations you’ve sent and that haven’t been accepted yet are listed under Pending invitations, each with its role and how long it has left, for example Invitation pending · expires in 5 days.
- Resend sends the invitation again. Use it on one marked Expired · resend to reissue to give it a fresh link.
- Cancel withdraws the invitation, so the link stops working.
Integrations
Section titled “Integrations”Connect your identity provider so people, devices and software arrive automatically instead of being typed in. Only owners and Admins can see and change integrations; tokens are stored on our servers and nobody else can read them.
| Integration | What it imports | Who can connect it |
|---|---|---|
| Microsoft 365 | Users with their MFA status, Intune‑managed devices, and registered applications (via Microsoft Graph) | A Microsoft 365 admin |
| Google Workspace | Directory users (department, status, 2‑Step Verification) and managed phones and tablets (via the Admin SDK Directory API) | A Workspace Super Admin |
Click Connect Microsoft 365 → or Connect Google Workspace → and sign in with the admin account. Once connected, each card shows its status and has Sync Now → to pull the latest changes and Disconnect to remove the connection. What happens to the imported records is described in People directory and Assets.
Using CSV instead? Bulk imports now live in the directories themselves: use Import in the People directory or Asset Directory to map your columns, check them, then import.
Account
Section titled “Account”Personal account settings (your profile, password and MFA) aren’t on this tab yet. If you need to change one of these, contact support@786cyber.net.
Danger Zone
Section titled “Danger Zone”Two organisation‑wide actions, available to owners and Admins. Both ask you to re‑enter your password before they run.
- Export all my data downloads a ZIP with a full JSON bundle plus CSVs of your assets, people and policies. A download link is also emailed to you and stays valid for 7 days.
- Delete organisation and all data permanently deletes all assets, people, policies, compliance records and scan history. You’ll be asked to type your organisation’s name to confirm. This can’t be undone, so export first if you might need anything. You’re signed out when it finishes, and an email confirms it.
More on how your data is held, exported and removed: Data & privacy.
Why it matters
Section titled “Why it matters”For everyday security: role‑based access means people see only what they should, and least privilege limits the damage if one account is compromised. Syncing from Microsoft 365 or Google Workspace keeps your people and devices current without anyone retyping them.
For compliance: defined roles and access levels evidence access control and separation of duties. Your classification levels and sites are what auditors expect asset records to refer to. An accurate organisation profile and logo also make your generated policies and reports audit‑ready.
Next: Data & privacy →