---
title: "Run your organization"
description: "Members and roles, invitations, verified domains, policies, settings your organization sets, the audit log, usage and limits."
works_on: []
---

# Run your organization

See who is in your organization, choose what each person can do, and check
every change in one place.

**Works on:** the desktop app, once you're signed in and belong to an
organization. Signing in on the desktop isn't available yet, so these pages
don't show today; see [Sign in](sign-in.md). The phone shows your
organization's name and your role. The web: not available yet.

## Find your organization

Open Settings (⌘, or Ctrl+,). Under your own pages, a second group is named
for your organization, for example **Acme Robotics**: **Overview**,
**Members and roles**, **Sign-in**, **Policies**, **Shared environments**,
**Audit log**, **Data and retention** and **Usage and limits**.

The palette (⌘K or Ctrl+K) has **Open organization settings**,
**Organization members**, **Organization policies** and **Organization audit
log**.

Everyone in the organization sees these pages. What you can change depends
on your role.

## Roles

| Role | Can |
| --- | --- |
| **Owner** | Everything: change roles, manage sign-in, set the monthly limit, invite and remove people |
| **Admin** | Invite and remove people, read usage and the audit log |
| **Member** | See the organization, its members and its policies |
| **Billing** | See the organization, read usage and set the monthly limit |

**Suspended** isn't a role. It marks someone who can't sign in right now.

A control your role can't use isn't shown. If someone changes your role
while a page is open and you try something you no longer can, the page says
"Your role can't do that."

## Invite someone

Owners and admins can invite.

1. On **Overview** or **Members and roles**, press **Invite people**.
2. Type their email address and choose a role. Only an owner can invite
   another owner.
3. Press **Invite**.

**Invitations** lists the ones nobody has used yet, with the day each one
expires. To cancel one, open its ⋯ menu and choose **Withdraw** (W).

## Change a role, remove someone, or leave

Open the ⋯ menu on a person (or focus the row and press Shift+F10):

- **Change role** (R), then Owner, Admin, Member or Billing. Owners only.
- **Remove…** (⌘⌫). Codewhale asks once: "They lose access to Acme Robotics
  at once."
- **Leave…** on your own row: "You lose access at once. Someone will need to
  invite you again."

The organization always keeps at least one owner: "The organization needs at
least one owner." Each change shows a short note, such as "Sam is now Admin ·
In the audit log", so you know it was recorded.

## Verified domains

**Sign-in** lists the email domains your organization has proven it owns.
Owners press **Add domain**, type the domain, add the DNS record it shows at
their domain host, then press **Check**. Until the record is there, it says
"The DNS record isn't there yet. Try again in a few minutes."

Other roles see "Only an owner manages sign-in."

## Policies

**Policies** shows the limits your organization sets for everyone:

- **Connectors:** which connectors people can add, and whether other MCP
  servers are allowed.
- **Cloud internet:** what work on cloud computers can reach while setting up
  and while working. "Applies to work on cloud computers. Your own computers
  keep their own network."

Members see "Ask an owner or admin to change these." Owners and admins see
"Changing policies here isn't available yet." On **Overview**, owners and
admins see **Edit policies**, which opens this page; others see **See all**.

## Settings your organization sets

When your organization sets something, the matching row in your own Settings
shows a lock and "Set by Acme Robotics", and you can't change it there:

- **Tools & MCP › Connectors**
- **Environments › Cloud internet**
- **Account › Monthly limit**, for owners, admins and billing

**Environments › This computer** reads "Not managed by Acme Robotics": your
organization doesn't manage the computer you're on, so it sets nothing there.

## Audit log

**Audit log** lists every change, newest first: who made it, what changed and
when. Press **Show more** for older entries. Owners and admins can read it.

Press **Verify** to check that no entry changed after it was written. It
reads, for example, "All 12 entries check out", or "An entry changed after it
was written".

## Usage and limits

**Usage and limits** shows this month's cloud requests against your
organization's monthly limit, and the day it resets. Owners, admins and
billing see it; others see "Owners, admins and billing see usage."

Owners and billing can set the limit: "Requests a month for everyone
together. Leave empty for no limit." Press **Save**.

## On your phone

The account sheet's **Organization** row shows your organization's name and
your role. Everything else on this page is on the desktop.

## On the web

Not available yet.

## Not available yet

- **Changing policies.**
- **Export** on the audit log.
- **Shared environments** and **Data and retention**.
- Signing in with your organization's single sign-on, and people added from
  your directory.

## Related

- [Settings](settings.md)
- [Choose where the work runs](environments.md)
- [Connectors and skills](connectors-and-skills.md)
- [Work together in a group](groups.md)

Previous: [Work together in a group](groups.md) · Next: [Maintainer mode](maintainer-mode.md)