Accounts, users and access

Manage your personal account, invite and administer users, groups and permissions, archive or delete a company, the organisation or your own account.

Overview

Three levels, three places:

My account (/account): your personal data — profile, security, notifications, preferences, support tickets. The same pages from every portal.
Company access (/c/companies/:companyId/access): the users, invitations, groups and permissions of one company.
Administration (/t): the whole organisation — every company, every user, the security policy, archiving and deletion.

Where in the app

Portal menu (top of the sidebar, under your name) → Profile — /account/profile
My account → Security — /account/security
My account → Notifications — /account/notifications
My account → Preferences — /account/preferences
My account → My support tickets — /account/support
Administration → Access — /t/access
Administration → Companies → company record — /t/companies/:companyId
Administration → Settings → Security — /t/settings/security
Administration → Settings → Danger zone — /t/settings/danger-zone

Every e-mail Numezis sends to a signed-in user ends with two links: Manage my account and Manage notification preferences.

My account

Profile

Profile photo: Change photo (JPEG, PNG, WebP or GIF) or Remove.
First name and last name (required), language (French, German, Italian, English) and time zone.
The e-mail address is shown but cannot be changed: it is your sign-in identifier. Until it is verified, a Resend verification e-mail button is offered.
The page opens read-only. Click Edit, then Save: only the changed fields are sent.

Security

Change my password: current password, new password, confirmation. Your organisation's policy (length, expiry, history) applies.
Active sessions: every signed-in device with its IP address and last activity. Revoke closes a session; the current device is tagged This device and cannot be revoked.
MFA status: the page shows whether multi-factor authentication is on. While it is off, the recommendation Enable multi-factor authentication leads to enrolment. Depending on the organisation's policy, MFA may be required at sign-in.
Security alerts and Recent activity: failed sign-in attempts of the last 24 hours, alerts with an Act button.

Notifications

Two channels, E-mail and In-app, set globally and then per event category. Events tagged Mandatory cannot be turned off.
Quiet hours: a time range and a time zone during which notifications are held back.
The notification language follows the profile language. Details are on the Notifications page.

Preferences

Default company: the company opened at sign-in. Switching company in the header does not change it.

My support tickets

Your tickets and their state; New ticket opens a request to support.

The same screens exist in a company (Access → Users, /c/companies/:companyId/access/users) and in Administration (Access → Users, /t/access/users). From Administration you invite into any company of the organisation.

Open Access → Users and choose Invite. Enter the e-mail, the access level (Tenant admin, Company admin or Company user), the company for a company role and, if needed, groups. A preview of the resulting access is shown before Send invitation.
For several people at once, Bulk invite: paste a list or import a CSV, XLSX or JSON file (a CSV template is provided), preview, then send.
The invitee receives an e-mail, opens the link and completes registration: first name, last name, password (at least 8 characters with an uppercase letter, a lowercase letter and a digit, plus your organisation's policy). Their session opens at once.
An invitation is valid for 7 days. Invitations lists each one with its expiry date; Resend restarts the 7 days, Cancel invitation withdraws one still pending.
On a user's record, change their role, companies and groups, resend the verification e-mail, or change their state: Activate, Deactivate, Archive, Restore.
In Administration, Remove access removes the person from the organisation: memberships, groups and rights. Their Numezis account stays intact and their other organisations are unchanged (USERS:DELETE permission). In a company, Remove from company withdraws only the access to that company. Only the platform can erase an account (see "Close your personal account").

Groups and permissions

A user gets their rights through their groups.

Default groups, locked and not deletable: Workspace administration (the whole organisation), Company administration, Company users (the baseline of every user), External auditor (read-only accounting access).
Access → Groups: create a group, edit it, delete it. Default groups are read-only.
Access → Permissions: the group × permission matrix. A toggle changes a custom group; default groups show as locked.
Access → Access requests: access-change requests filed from a user record, to approve or reject.

Organisation security policy

Administration → Settings → Security sets MFA (required or not), the password policy, the session duration and the allowed e-mail domains. A company can tighten these rules in its own Settings → Security; the strictest rule applies at sign-in.

Archive or delete a company

In Administration, open the company record (/t/companies/:companyId) and its danger zone.
Deactivate or Archive removes the company from everyday views while keeping its data; Restore undoes it. Delete is irreversible.
In the company portal, Settings → Danger zone offers no action: it states that archiving and deletion belong to Administration and leads there when you have access.

Delete the organisation

Reserved to an administrator holding the TENANT:DELETE permission, included in Workspace administration.

Open Administration → Settings → Danger zone.
Export JSON: confirm the two warnings, type the exact organisation name and its identifier. An export token is generated; it is required at the next step.
Delete tenant: tick the two confirmations, type the organisation name, the identifier and the word DELETE.
An active, trialing or unpaid subscription blocks deletion: cancel it first in Settings → Numezis subscription.
Every company and its data, memberships and access are deleted immediately and permanently. Neither support nor any product tool can undo it.

Close your personal account

Deleting an organisation does not erase your sign-in identity (e-mail address, first name, last name, password): it may belong to several organisations. There is no self-service button yet.

If you administer an organisation nobody else uses, delete it first (previous section). Otherwise, ask your administrator to deactivate or archive your access.
Write to privacy@numezis.com from the account's e-mail address, asking for its deletion.
We erase the identity and confirm it to you in writing, within 30 days at most (revFADP and GDPR).

Permissions and modules

My account: any signed-in session. NOTIFICATIONS:READ to see preferences, NOTIFICATIONS:MANAGE_PREFERENCES to change them; SUPPORT:READ and SUPPORT:CREATE for tickets.
Users: USERS:READ, USERS:INVITE, USERS:MANAGE, USERS:ACTIVATE, USERS:DEACTIVATE, USERS:ARCHIVE, USERS:RESTORE, USERS:DELETE.
Groups and permissions: GROUPS:READ, GROUPS:MANAGE.
Security policy: TENANT:MANAGE_SETTINGS (organisation), COMPANY:MANAGE_SETTINGS (company).
Organisation deletion: TENANT:DELETE.