Settings
Route: /settings (sections with an "On this page" scroll-spy)
| Card | Who | What |
|---|---|---|
| Workspace | everyone | Slug, plan, status, trial end, members avatar group |
| Security | everyone / owner | /settings/security — two-factor status, authenticator app (QR + key), backup codes (shown once), active devices with sign-out, owner rule "require authenticator app" |
| Company details | settings.manage | Currency, locale, time zone, brand name (company name read-only); legal name, address, phone and contact e-mail printed on documents and e-mails |
| Reference data | masters.read | Links to Units and Warehouses |
| Appearance | everyone / owner | Theme & density (personal), accent colour (workspace), sound & haptics (device) |
| Component gallery | settings.manage | /settings/components — every UI component live |
| Logo | settings.manage | Light and dark logos (PNG/JPG/SVG ≤ 512 KB), cropper, remove |
| Low-code | low-code perms | Forms, Dashboards, Workflows |
| System blueprint | everyone | /settings/blueprint |
| Sample data | settings.manage | Add or remove about 30 example records in every section; the count per section (§5) |
| Storage usage | settings.manage | GB used of the plan (attachments, photos, signatures) |
| Billing | settings.manage | /settings/billing |
| API keys | settings.manage | Create (shown once) / revoke; scopes; expiry |
| Webhooks | settings.manage | Endpoints, events, secret, test ping, pause, delete |
| Company e-mail sender | everyone / owner | The mailbox business e-mails are sent from (Google / Microsoft / Zoho sign-in or SMTP + code), test, disconnect, reconnect banner, "when our mailbox can't send" (SOP-14) |
| E-mail log | settings.manage | /settings/email-log: every outbound business e-mail, filters, retry, decisions |
| Roles & permissions | users.manage | /settings/roles matrix |
| Audit log | settings.manage | /settings/audit-log: who did what, when; filter by record type, search, expand details; retention per plan |
Last updated