Security and administration

This page covers the security settings of your own account and the tools administrators use to manage members, roles and usage. It also explains how Akollo limits support access, outbound connections and access between organisations.

Your accountCopy Anchor Link

Account → Security holds your sign-in settings:

• e-mail and password;
• two-step verification with an authenticator app, with backup codes;
• passkeys, where enabled;
• trusted devices, which you can remove;
• connected accounts, which you can unlink.

Preferences sets the light or dark theme where it is offered. Appearance sets a background for the app; it is stored in the current browser only.

To change your password:

Members and rolesCopy Anchor Link

Admin → Users lists the organisation’s members, with their role and joining date, and the pending invitations. Administrators invite people and cancel invitations there. Admin → Roles lists the roles; changing them needs the role-management permission. Permission sets and field policies are described in Organisation and access.

To invite a member:

UsageCopy Anchor Link

Admin → Usage shows your organisation’s usage per meter, day by day. Days follow the organisation’s time zone. The meters include:

• AI input tokens and AI output tokens;
• AI calls and API calls;
• webhook deliveries;
• storage;
• exported rows;
• automation runs;
• active users (each day’s value is that day’s snapshot, so a range total is read in user-days).

People with the export permission can download a meter’s usage as CSV with Download CSV.

The platform operator sets an upper limit per meter. Your organisation can set a lower monthly budget for any meter; it cannot be above the upper limit. At 80 % and at 100 % of the budget, the organisation’s owners and admins get a notice. Usage is never blocked.

Support sessionsCopy Anchor Link

When Akollo support opens a session in your organisation, a Support session banner is shown. A support session can read the pages it is allowed to see. It cannot create, change, approve or delete anything, and sensitive fields stay hidden.

Audit recordsCopy Anchor Link

Changes to privileges and configuration are written to the audit log. Administrators read it under Admin → Audit records.

Outbound connectionsCopy Anchor Link

Connectors such as directory sync reach only the external hosts that your installation’s administrators have allowed. Each connector’s own settings in your organisation narrow this list further. When no allowed list has been set up, connectors cannot reach any external host.

Tenant isolationCopy Anchor Link

Every page, list, export and API response contains only the data of the organisation you are working in. A record from another organisation is reported the same way as a record that does not exist.

FAQCopy Anchor Link