Company settings

People, roles, security, models and spend limits, billing, the audit log and your data.

Company settings are for administrators. They apply to everyone in the company.

Each page makes one kind of decision: who is here, what they may do, how they sign in, which models agents may use, and how much they may spend.

Every change is recorded in the audit log.

In this guide

General and brand In pilot
People In pilot
Invite many people at once In pilot
Roles In pilot
Security In pilot
Single sign-on In pilot
Checks In pilot
Categories In pilot
Models and spend limits In pilot
Bring your own model keys In pilot
More model providers Coming next
Billing and plan In pilot
Audit log In pilot
Data and privacy In pilot
Deployment accounts In pilot
Who can do what

General and brand

In pilot

The company's name, logo, colours and images, previewed before you apply them.

What you can do

Change the company name and logo
Preview a new theme, apply it or go back
Keep a library of company images

In Falcon: General · Images

In the API: getCompanyTheme, changeCompanyThemeDraft, changeCompanyThemePreview, changeCompanyThemeApply, changeCompanyThemeRevert, uploadCompanyLogo, listCompanyImage, createCompanyImage

People

In pilot

See everyone in the company, invite someone new, and make a person inactive when they leave.

What you can do

Invite someone with a role
Change a person's role
Make a person inactive and sign them out

In Falcon: People · Invite someone · A person

In the API: listCompanyPerson, searchCompanyPeople, createCompanyInvitation, updateCompanyPerson, signOutCompanyPerson

Invite many people at once

In pilot

Upload a list of people with their roles and send all the invitations together.

What you can do

Upload a CSV of up to 500 people
Check every row before anything is sent
See which invitations were sent and which failed

In Falcon: Invite someone

In the API: invitePeople

Roles

In pilot

A role is a set of things a person may do. Use the built-in roles or make your own.

What you can do

See what each role allows
Create or change a role

In Falcon: Roles · A role

In the API: listRoles

Security

In pilot

Decide how people sign in, whether a second step is required, and how long sessions last.

What you can do

Choose the ways people may sign in
Require a second step
Set session length

In Falcon: Security

In the API: actOnCompanySecurity

Single sign-on

In pilot

Let people sign in through the company's own Microsoft tenant or identity provider.

What you can do

Approve Falcon in your Microsoft tenant, or use your own app
Set up single sign-on for your domain

In Falcon: Single sign-on

In the API: actOnCompanySso, getCompanyMicrosoftSignIn, putCompanyMicrosoftSignIn, completeCompanyMicrosoftConsent

Checks

In pilot

One place for the checks Falcon runs on what people type, such as identity details, with a way to try each one.

What you can do

Turn checks on or off
Adjust how strict a check is
Try a check on your own example

In Falcon: Checks

In the API: getValidationChecks, putValidationChecks, tryValidationCheck

Models and spend limits

In pilot

Choose which AI models agents may use, and set daily and monthly spend limits, so a runaway loop can't run up a bill.

What you can do

Approve models for the company
Set daily and monthly spend limits
See each model's use against its limit

In Falcon: Models & limits

In the API: actOnCompanyModelLimits, listModelChoices, getAgentDailyCostCap

Bring your own model keys

In pilot

Use your own key for a model provider, such as OpenRouter or xAI, so that spend is on your account.

What you can do

Add a provider key
Choose which models use it

In Falcon: Models & limits

In the API: setCompanyModelsSecret

More model providers

Coming next

Use OpenAI directly, any OpenAI-compatible service, or your company's own Amazon Bedrock.

What you can do

Connect OpenAI or a compatible service
Use models from your own Bedrock account

Billing and plan

In pilot

See the company's plan, keep payment methods, and download invoices.

What you can do

See the current plan
Add or change a payment method
Download invoices

In Falcon: Billing & plan · Plan · Payment methods

In the API: getCompanyBilling, getCompanyPlan, listCompanyPaymentMethod, createCompanyPaymentMethod, createBillingPortalSession, downloadBillingInvoice

Audit log

In pilot

A record of who changed what, and when, across the company.

What you can do

Search the log
Export it

In Falcon: Audit log

In the API: listCompanyAudit, searchCompanyAudit, exportCompanyAudit

Data and privacy

In pilot

Answer people's requests to see or delete their data, and export what the company has written.

What you can do

Record and complete a privacy request
Export the company's authored content

In Falcon: Data & privacy

In the API: actOnCompanyDataPrivacy, listCompanyPrivacyRequests, createCompanyPrivacyRequest, completeCompanyPrivacyRequest, exportCompanyAuthoredContent

Deployment accounts

In pilot

Run your agents in Falcon's AWS account, or in your company's own.

What you can do

Add your own AWS account
See which account each agent runs in

In Falcon: Deployment accounts

In the API: listCompanyDeploymentAccount, createCompanyDeploymentAccount, getCompanyDeploymentDetails

Who can do what

Who may do each thing in this guide, and what an AI assistant connected as that person may do with it. Roles are set in Company settings › Roles.

What	Who may	An assistant
Reads the company's theme: the live one and any draft	Company administrators	Reads · needs “look”
Changes the draft theme	Company administrators	Changes · needs “change settings” · waits for your approval
Makes a preview of the draft theme	Company administrators	Changes · needs “change settings” · waits for your approval
Applies the draft theme so everyone sees it	Company administrators	Changes · needs “change settings” · waits for your approval
Goes back to an earlier theme	Company administrators	Changes · needs “change settings” · waits for your approval
Uploads a logo for the theme	Company administrators	Changes · needs “change settings” · waits for your approval
Lists the company's agent images	Company administrators	Reads · needs “look”
Adds an agent image	Company administrators	Changes · needs “change settings” · waits for your approval
Lists the people in the company	Company administrators	Reads · needs “look”
Searches the company's people	Company administrators	Reads · needs “look”
Invites a person to the company	Company administrators	Reaches outside · needs “change settings” · waits for your approval
Changes a person's role or details	Company administrators	Changes · needs “change settings” · waits for your approval
Signs a person out everywhere	Company administrators	Cannot be undone · needs “change settings” · waits for your approval
Preview or invite many people	Company administrators	Reaches outside · needs “change settings” · waits for your approval
List roles	Anyone who can see it	Reads · needs “look”
Run a security action	Company administrators	Changes · needs “change settings” · waits for your approval
Run a single sign-on action	Company administrators	Changes · needs “change settings” · waits for your approval
Read Microsoft sign-in settings	Company administrators	Reads · needs “look”
Save Microsoft sign-in settings	Company administrators	Changes · needs “change settings” · waits for your approval
Record Microsoft admin approval	Company administrators	Changes · needs “change settings” · waits for your approval
Read company validation checks	Company administrators	Reads · needs “look”
Save company validation checks	Company administrators	Changes · needs “change settings” · waits for your approval
Try a validation check	Company administrators	Changes · needs “change settings” · waits for your approval
Shows what moving agents or instructions between categories would change	Company administrators	Reads · needs “look”
Moves agents or instructions between categories, using a preview you made just before	Company administrators	Changes · needs “change settings” · waits for your approval
Run a model settings action	Company administrators	Changes · needs “change settings” · waits for your approval
Lists the models you can choose for an agent	Anyone who can see it	Reads · needs “look”
Get agent daily cost cap	Anyone who can see it	Reads · needs “look”
Save a model credential	Company administrators	Changes · needs “change settings” · waits for your approval
Read billing details	Company administrators	Reads · needs “look”
Read the company plan	Company administrators	Reads · needs “look”
Lists the company's payment methods	Company administrators	Reads · needs “look”
Adds a payment method	Company administrators	Changes · needs “change settings” · waits for your approval
Open the billing portal	Company administrators	Reaches outside · needs “change settings” · waits for your approval
Download billing invoice	Company administrators	Reads · needs “look”
Lists entries in the company's audit log	Company administrators	Reads · needs “look”
Searches the company's audit log	Company administrators	Reads · needs “look”
Export the audit log	Company administrators	Changes · needs “change settings” · waits for your approval
Run a data privacy action	Company administrators	Changes · needs “change settings” · waits for your approval
List privacy requests	Company administrators	Reads · needs “look”
Record a privacy request	Company administrators	Changes · needs “change settings” · waits for your approval
Complete a privacy request	Company administrators	Cannot be undone · needs “change settings” · waits for your approval
Export authored content	Company administrators	Changes · needs “change settings” · waits for your approval
Lists the cloud accounts the company deploys agents to	Company administrators	Reads · needs “look”
Adds a cloud account to deploy agents to	Company administrators	Changes · needs “change settings” · waits for your approval
Read deployment details	Company administrators	Reads · needs “look”

Next: Reports

General and brand

What you can do

People

What you can do

Invite many people at once

What you can do

Roles

What you can do

Security

What you can do

Single sign-on

What you can do

Checks

What you can do

Categories

What you can do

Models and spend limits

What you can do

Bring your own model keys

What you can do

More model providers

What you can do

Billing and plan

What you can do

Audit log

What you can do

Data and privacy

What you can do

Deployment accounts

What you can do

Who can do what