Administration in Irys One
Organization Management
Organization Management lets firm administrators configure the team structure, control access, and enforce security policies across the entire Irys One deployment.
Setup wizard
When you first create an organization, a guided wizard walks you through the essentials:
Name and branding
Enter your organization name and upload a logo. The logo appears on the dashboard and in exported documents if configured.
Invite members
Add team members by email address. You can invite individually or upload a CSV file for bulk invitations.
Assign roles
Assign each member a role that controls their permissions within the platform.
Member management
| Action | How |
|---|---|
| Invite | Send individual email invitations from the Members tab. |
| Bulk invite | Upload a CSV file with columns for name, email, and role to onboard an entire team at once. |
| Role assignment | Assign a role. Owners and admins are the two roles that unlock billing, organization settings and the security policies; everyone else works in the product without them. |
| Active / Inactive | Deactivate a member to revoke access without deleting their account. Reactivate at any time. |
Workspaces
Create workspaces to organize members by practice group, office, or project team. Workspaces can have their own shared Matters, templates, and document libraries so teams stay organized without interfering with each other.
Security policies
Organization security is not a separate admin area. It sits under Organization security on your own Security page, below your personal controls, and only owners and admins see it. There are two policies.
Require 2FA for everyone
Members who sign in with an email and password must set up an authenticator app. Google and SSO sign-in are not affected, because the identity provider already handles it.
Turning this on does not lock anyone out that day. A grace period of seven days runs first, and access is blocked after it for anyone who has not enrolled. Tell your members before you switch it on, not after.
Single sign-on
Connect Google Workspace, Microsoft Entra or Okta so everyone with your email domain can sign in through your identity provider. Configure SSO walks four steps:
- Set your email domain.
- Choose Google, Microsoft or Okta.
- Enter the OIDC credentials from your identity provider.
- Test the connection, then save.
Password sign-in keeps working until you save a tested connection, so a half-finished SSO setup cannot lock your firm out. The test is the gate.
Need help?
Contact our support team at support@iqidis.ai for assistance.