Platform administration

This page is for people managing Empeiro itself. A management Owner creates and removes customer organizations, manages platform settings and management people. A management Admin can read organization summaries, open the example when enabled and view platform settings. Only an Owner changes company or platform settings. These roles are separate from administrator and agent roles inside a customer's help desk.

Manage the provider company

Open Platform → Your company from the management account. It names the company that provides Empeiro, separate from every customer organization. An Owner can edit Company name and select Save. Management Admins can read the saved name but cannot change it. The name is stored in Empeiro's protected settings and appears on this company card; it does not rename customer organizations or charge anyone. Customer accounts cannot open Platform.

Read the setup checklist

Open Platform. Setup checklist summarizes access, email, storage and the example. Select Open beside a line to reach its relevant settings or management page. Read the connection result and last-tested time: a green test is evidence of that test, not a guarantee that credentials remain valid forever.

For customer onboarding, follow Adding an organization and the real tenant's Microsoft 365 guide. Organization Open shows management status and activity rather than granting access to its ticket conversations. Organization removal requires its named confirmation and deletes its Empeiro data; it does not change the Microsoft tenant.

Invite management staff

1. As an Owner, open the management People page and select Add a person.
2. Enter First name, Last name, Email and Role: Admin or Owner.
3. Select Add and make an invite link.
4. Read the delivery note, then Copy the one-time link if you must deliver it yourself. It is shown once, works once and lasts an hour. Select Done afterward.
5. The recipient opens the link and sets their own password. Check the person's status and Signs in with information in the list.

Re-send invite replaces an unused invitation; New password link supplies recovery for an active account. Revoke link invalidates a pending link. Remove ends that person's access, passkeys, links and sessions after confirmation. You cannot remove yourself or the last Owner. These actions do not ask you to know another person's password.

An Owner can toggle Require a passkey after the password. It applies to management people who already have both a password and a passkey: a password sign-in then asks for passkey confirmation. Direct passkey sign-in remains available. Review actual enrollment and recovery before changing access requirements.

Connect Empeiro's own email

This is the mailbox for invitations, new-password links, sign-in codes and notices. It is separate from customer Microsoft 365 directory credentials and does not import mail or staff.

1. Under Empeiro's own email, choose Mail service. Read its provider-specific hint.
2. Fill SMTP server, Port and Security (STARTTLS or SSL) using the provider's permitted SMTP settings.
3. Enter User name, Password or app password, Send as (address) and Send as (name). When replacing existing settings, leaving the password empty preserves the saved one; the hint shows only its ending.
4. Enter an authorized recipient in Send a test to and select Save and send a test. This saves the settings, then attempts a real email. Save alone does not test delivery.
5. Read the returned message, connection light and Last tested. Confirm arrival in the intended mailbox, including spam/quarantine checks.

Failed testing can leave saved settings in place. Correct the server, credentials, sender permission or provider's SMTP policy, then test again. This form does not offer an OAuth mailbox-authentication flow; if the provider refuses the authentication this deployment supports, obtain an allowed configuration from the operator rather than assuming Microsoft directory consent enables SMTP.

To disconnect, select Remove, read the warning and confirm Remove. No sign-in codes or password recovery messages are emailed until a mailbox is connected again. Copied invite links can still be delivered manually. Removing the card does not delete the external mailbox or revoke its credentials.

Prepare attachment storage

The running installation uses either local server storage or Cloudflare R2, selected by its deployment configuration. The card prepares and tests R2 credentials. Saving and testing this card does not activate R2 or move existing attachments. The setup checklist states when R2 is tested but the active store remains the server.

1. In the Cloudflare account used for the product, prepare the intended R2 bucket and credentials with Object Read & Write restricted to that bucket.
2. Under Attachment storage, enter Account ID (the 32-character account identifier), Bucket, Access Key ID and Secret Access Key. For existing saved settings, an empty secret preserves the saved secret.
3. Select Save and test. The test writes a test object, reads it back and deletes it; it contacts the real bucket. Save alone only saves the credentials.
4. Read the actual result. Correct bucket permissions, identifier or credentials on failure, and test again.
5. Ask the installation operator to coordinate the deployment switch and migration of existing pictures before using R2 for live attachments. Check a permitted normal upload/download after that operational change.

Remove deletes the page's saved bucket values and test state after confirmation. Attachments stay where they are. It neither deletes the bucket nor moves existing objects. Environment-configured values can still supply storage configuration, so use the checklist and operator's active-store check when diagnosing this.

Example organization

When the installation enables it, Organizations → Example organization is an isolated made-up company, Larkspur Supply Co., with simulated directory data.

Enter the example opens that demonstration workspace. Start the example over resets its demonstration state; Start empty opens its empty-start workflow. Check the confirmation before resetting. An enabled external AI provider inside it can still make real model requests with the configured key.

The firm's onboarding uses a real organization and real Microsoft tenant. Do not enter or seed the example to provision the firm's staff, and do not use sample employees to make a live import pass.

Stripe billing and operational limits

An Owner configures Stripe under Platform → Stripe billing. Read Subscriptions and billing for the exact setup, customer purchase and portal steps. Management Admins can read setup and customer subscription status; only an Owner changes credentials and prices. The provider's Stripe account holds the payment details. Billing remains unavailable until credentials and at least one recurring price have passed the read-only connection test. A customer organization's administrator purchases or manages its subscription from its own Billing page. Listing an organization never means payment was taken.

Activity records administrative outcomes. Database backups, retention, deployment switches and restore verification are operator responsibilities; this release has no customer restore button. Removing current organization records does not immediately remove copies from earlier retained backups. Use the installation's verified retention policy when handling a deletion request rather than treating a UI removal as proof that every backup has expired.