Modules

Turn product areas on or off for the whole workspace. A disabled module hides its pages and its permissions.

Permissions

Enabled

of 12 available modules

Plan-gated

Require Enterprise

In beta

Opt-in, may change

Last changed

Aug 14, 2026

by Tomas Berg

Core

User directoryRequired Accounts, profiles, invitations, and the user lifecycle. Cannot be disabled. 8,942 users · 14 permissions Roles & permissionsRequired Role-based access control, custom roles, and the permission matrix. 9 roles · 42 permissions Teams & groups Organisational structure, group membership, and directory sync. 6 teams · 24 groups Audit log Immutable record of every privileged action, retained for 400 days. 32,690 events this month

Optional

Billing & subscriptions Plans, seats, invoices, and payment methods. 1,014 active seats Mailbox Shared inbox for account and access requests. 18 unread threads Messaging Direct messages between workspace members. 5 active conversations Calendar Access reviews, onboarding sessions, and maintenance windows. 23 events scheduled Task board Kanban board for access requests and offboarding work. 14 open cards Webhooks Push lifecycle events to your own systems. Disabled — no endpoints configured

Beta & plan-gated

Automated access reviewsBeta Schedule recurring recertification campaigns and auto-revoke uncertified grants. Behaviour may change before general availability Risk scoringBeta Score each sign-in on device, location, and behaviour, and step up authentication when it looks wrong. 2,380 sign-ins scored in the last 30 days SCIM provisioningEnterprise Push account lifecycle from your identity provider. Upgrade to enable. Audit log streamingEnterprise Stream events to S3, Splunk, or Datadog in near real time. Upgrade to enable.

Disabling a module hides its data, it does not delete it

Pages and permissions disappear for everyone immediately. Re-enabling restores access exactly as it was. Data retention follows your workspace policy either way.