Organisations and members

Find or create an organisation

To switch organisation, use the organisation menu in the top bar. To see all your organisations in one place, select Manage organisations in that menu. Every member who has at least one organisation sees it, whatever their role and however many organisations they belong to. You can also open Organisations by its address.

The page is one plain table of the organisations you are a member of, with these columns: Organisation, Sites, Members, Your role (Organisation admin, Site manager, Viewer or No role) and Default. Select a row to open that organisation. There is no search box, no status filter and no card view. The current default organisation shows a Default badge. Select Make default in the Default column on another row to record your preferred organisation. The default is not on an organisation's own page. The organisation menu still controls the current page.

Use New Organisation or Create Organisation when available. Enter its name and optional description, then submit. Creation permission is checked again on submit. The recorded owner must still administer the billing account. An invited administrator cannot create an organisation under someone else's account. If you own several billing accounts, the current form cannot supply the required choice; contact Support when asked to select one. A plan upgrade is not required to create another empty organisation. If a request fails, the form keeps your details; follow its message before retrying.

An authorised owner can create separate organisations for clients on any plan. The organisations share their billing account's site allowance and 50-person capacity; a new organisation has no separate free site. Select the holding organisation to inspect billing if you have the required authority.

Organisation details

Open Settings → General. An administrator can edit the organisation name, description, and these controls:

• Require two-factor authentication for all members: requires setup at the next password sign-in. Provider sign-ins follow the provider flow. The same setting is also in the Security card in Settings → General (see Password expiry); saving it there can ask for a fresh two-factor code.
• Security alert audience: email all members: security alerts are required notices. When on, every eligible member is emailed and cannot turn security alerts off. When off, administrators are emailed, plus members who opted in under Email preferences in Profile. The view shows Security alert audience as All members or Administrators, plus members who opted in. Every member still sees applicable dashboard alerts. The opt-in covers security alerts only; it does not add members to stale or missing reporting, certificate or administrator-only messages.

Select Save to apply changes or Cancel to discard them. Organisations do not have a time zone setting. The day and month boundaries used for patching SLA results and reports, and other schedules, follow the organisation owner's time zone (UTC if the owner has none). An organisation with no recorded owner keeps the zone it already has. Times shown in the dashboard follow your own time zone, set on your Profile. Changing a time zone does not rewrite stored event times.

Settings → General also shows the organisation's sites. The member list shows an Owner badge beside the owner. The owner transfers ownership from their own row in the member list; deletion controls are in Settings → Data and privacy. Another organisation's details page (an organisation you belong to but have not selected) still shows member roles and status, a site summary and deletion controls when permitted.

Shared user capacity and recovery

A billing account permits at most 50 distinct active people across its organisations, including the owner, administrators, managers, and readers. Changing roles or upgrading plans does not raise this limit. The same person counts once across those organisations. A valid pending invitation reserves a place when its email address does not already belong to an active person there; invitations to that address in several covered organisations share one reservation. Expired or cancelled invitations release their reservation. Accepting an existing valid reservation does not need a second place, but a reservation from an older over-capacity account cannot take the number of active people above 50.

Inactive organisations still count their active members. Removing a person from one organisation frees a place only if they have no other counted membership under that billing account. Deactivated or deleted personal accounts do not count until reactivated. Existing accounts already above 50 keep their data and access, but cannot add another distinct person.

If an invitation, membership change, account reactivation, restoration, or email change is refused because the account is full, an organisation administrator can cancel an unused pending invitation or remove memberships that are no longer needed. Check other covered organisations too, then retry. Only authorised account administrators can reactivate or restore a personal account. An email change can also be refused if it would leave a separate pending invitation reservation at the old address. Ask the sending administrator to cancel that invitation if it is no longer needed.

If the message says the billing account is processing another admission, wait briefly and retry the same action. This is a temporary conflict, not confirmation that the change succeeded. The dashboard does not yet show a shared used/reserved/remaining capacity counter. An administrator of one client organisation may need the owner or Support to check the other organisations without exposing their membership details.

Invite and manage members

Open Members (the page was called Users). Select an organisation and search by name or email. The organisation menu's Invite opens this page with the invite dialog ready for an administrator; for anyone else it opens the page without the dialog.

1. Select Invite member (or arrive from Invite in the organisation menu).
2. Enter the email address.
3. Select the organisations you administer that the person must join.
4. Choose Viewer for read access, Site manager to let the person run the organisation's sites, or Organisation admin for administration. An invitation with no role makes the person a viewer.
5. Add an optional message and send the invitation.

Inviting someone as an Organisation admin asks for a fresh two-factor code if you sign in with two-factor authentication. Inviting a viewer or site manager does not.

The Invite button on another organisation's details page opens the Invite member dialog and adds the person as a viewer. You can change their role afterwards with Edit or Manage. Use Members when you need to choose the invitation role or invite to several organisations.

Pending invitations shows invitation and delivery state. Refresh delivery status checks it again. Resend sends a new invitation attempt; Cancel invalidates the invitation. Queued delivery does not prove that an email reached the inbox. If delivery failed, follow the error and resend from the existing invitation rather than creating duplicates. A multi-organisation invitation can succeed for some organisations and fail for others; check each result.

Invitation creation and resend have shared limits for the sender, organisation, and recipient. Wait at least 10 minutes before sending another invitation to the same address in that organisation; other limits can require a longer wait. If a resend is blocked, the previous link keeps its existing expiry and is not replaced. After a successful resend, use the new email link. Do not cancel a valid invitation just to retry delivery.

The member list shows each person's name, email, role in that organisation, whether they are active, and the Owner badge. It does not show account-wide details, such as whether someone is a platform administrator or which other organisations they belong to. Every member can still see the other members' email addresses.

Use Edit or Manage to change a member's role in an organisation or remove their membership. Members also supports selected-member role changes and removals. Check the selected organisation and people before a bulk action. A member has one role in each organisation. Choosing a new role replaces the old one straight away, with no end date. Changing the organisations a person belongs to (Edit, then Organisation Memberships and Save Memberships) asks for a fresh two-factor code if you use two-factor sign-in, and you cannot remove yourself from an organisation that way. Use Remove only for others; you cannot remove yourself there either. Access that uses the API behaves the same way: granting or revoking a role through the API asks for a fresh two-factor code, and revoking a member's only role is refused with "Assign another role, or remove the member." Membership changes apply within the organisations you may administer. They do not delete the person's account or other memberships. New members join through an invitation.

An organisation that has an active administrator must keep one while other members remain. Sentinel refuses with Make another member an administrator first. (code last_administrator) when you:

• change the only administrator's role to a lower one;
• remove the only administrator from the organisation while other members remain.

To recover, make another active member an Organisation admin, then repeat the change. If the person also holds an organisation-wide (global) administrator grant, you can still remove their organisation-scoped administrator role, because that grant keeps the organisation administered.

The owner is protected. The member list shows an Owner badge. An administrator cannot demote the owner, revoke the owner's administrator role, or remove the owner from the organisation. Sentinel refuses with "This member owns the organisation. The owner transfers ownership to another administrator first." To change this, the owner uses Transfer ownership (see Transfer ownership). If the owner is gone and cannot transfer, contact Sentinel support, who can change the owner's role to recover the organisation.

Global password reset and global account activation are not organisation-admin permissions, even if a control such as Reset password (administrator) appears in a member dialog. Members change their own passwords in Profile or use Forgot password. Use the authorised two-factor reset only for account recovery. An organisation administrator can reset a member's two-factor setup only if that person belongs to no other organisation that the administrator does not administer. Otherwise Sentinel refuses with "This person also belongs to another organisation. Contact Sentinel support to reset their two-factor setup."

When an account is deactivated and reactivated, or its pending deletion is cancelled, earlier sign-ins and unused password reset links stop working. The person must sign in again, and requests a new reset link if theirs was unused.