> Index of every Falcon docs page, for assistants: https://falcon.com/docs/llms.txt # Company settings People, roles, security, models and spend limits, billing, the audit log and your data. Company settings are for administrators. They apply to everyone in the company. Each page makes one kind of decision: who is here, what they may do, how they sign in, which models agents may use, and how much they may spend. Every change is recorded in the audit log. ## Features ### General and brand The company's name, logo, colours and images, previewed before you apply them. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Change the company name and logo - Preview a new theme, apply it or go back - Keep a library of company images In Falcon: General · Images In the API: `getCompanyTheme`, `changeCompanyThemeDraft`, `changeCompanyThemePreview`, `changeCompanyThemeApply`, `changeCompanyThemeRevert`, `uploadCompanyLogo`, `listCompanyImage`, `createCompanyImage` ### People See everyone in the company, invite someone new, and make a person inactive when they leave. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Invite someone with a role - Change a person's role - Make a person inactive and sign them out In Falcon: People · Invite someone · A person In the API: `listCompanyPerson`, `searchCompanyPeople`, `createCompanyInvitation`, `updateCompanyPerson`, `signOutCompanyPerson` ### Invite many people at once Upload a list of people with their roles and send all the invitations together. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Upload a CSV of up to 500 people - Check every row before anything is sent - See which invitations were sent and which failed In Falcon: Invite someone In the API: `invitePeople` ### Roles A role is a set of things a person may do. Use the built-in roles or make your own. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - See what each role allows - Create or change a role In Falcon: Roles · A role In the API: `listRoles` ### Security Decide how people sign in, whether a second step is required, and how long sessions last. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Choose the ways people may sign in - Require a second step - Set session length In Falcon: Security In the API: `actOnCompanySecurity` ### Single sign-on Let people sign in through the company's own Microsoft tenant or identity provider. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. > > Plans: only on the Enterprise plan. What you can do: - Approve Falcon in your Microsoft tenant, or use your own app - Set up single sign-on for your domain In Falcon: Single sign-on In the API: `actOnCompanySso`, `getCompanyMicrosoftSignIn`, `putCompanyMicrosoftSignIn`, `completeCompanyMicrosoftConsent` ### Checks One place for the checks Falcon runs on what people type, such as identity details, with a way to try each one. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Turn checks on or off - Adjust how strict a check is - Try a check on your own example In Falcon: Checks In the API: `getValidationChecks`, `putValidationChecks`, `tryValidationCheck` ### Categories The groups agents are sorted into on the Agents page. Every company starts with a set. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Add, rename or remove categories - Preview what a change moves In Falcon: Categories In the API: `previewCompanyCategoryChange`, `applyCompanyCategoryChange` ### Models and spend limits Choose which AI models agents may use, and set daily and monthly spend limits, so a runaway loop can't run up a bill. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Approve models for the company - Set daily and monthly spend limits - See each model's use against its limit In Falcon: Models & limits In the API: `actOnCompanyModelLimits`, `listModelChoices`, `getAgentDailyCostCap` ### Bring your own model keys Use your own key for a model provider, such as OpenRouter or xAI, so that spend is on your account. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. > > Available since 29 September 2026. What you can do: - Add a provider key - Choose which models use it In Falcon: Models & limits In the API: `setCompanyModelsSecret` ### More model providers Use OpenAI directly, any OpenAI-compatible service, or your company's own Amazon Bedrock. > Coming next: Designed and planned, not built yet. What you can do: - Connect OpenAI or a compatible service - Use models from your own Bedrock account ### Billing and plan See the company's plan, keep payment methods, and download invoices. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - See the current plan - Add or change a payment method - Download invoices In Falcon: Billing & plan · Plan · Payment methods In the API: `getCompanyBilling`, `getCompanyPlan`, `listCompanyPaymentMethod`, `createCompanyPaymentMethod`, `createBillingPortalSession`, `downloadBillingInvoice` ### Audit log A record of who changed what, and when, across the company. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Search the log - Export it In Falcon: Audit log In the API: `listCompanyAudit`, `searchCompanyAudit`, `exportCompanyAudit` ### Data and privacy Answer people's requests to see or delete their data, and export what the company has written. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Record and complete a privacy request - Export the company's authored content In Falcon: Data & privacy In the API: `actOnCompanyDataPrivacy`, `listCompanyPrivacyRequests`, `createCompanyPrivacyRequest`, `completeCompanyPrivacyRequest`, `exportCompanyAuthoredContent` ### Deployment accounts Run your agents in Falcon's AWS account, or in your company's own. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. > > Runs in: your own AWS account. What you can do: - Add your own AWS account - See which account each agent runs in In Falcon: Deployment accounts In the API: `listCompanyDeploymentAccount`, `createCompanyDeploymentAccount`, `getCompanyDeploymentDetails` ## Who can do what Who may do each thing in this guide, and what an AI assistant connected as that person may do with it. Roles are set in Company settings › Roles. | What | Who may | An assistant | |---|---|---| | Reads the company's theme: the live one and any draft | Company administrators | Reads · needs “look” | | Changes the draft theme | Company administrators | Changes · needs “change settings” · waits for your approval | | Makes a preview of the draft theme | Company administrators | Changes · needs “change settings” · waits for your approval | | Applies the draft theme so everyone sees it | Company administrators | Changes · needs “change settings” · waits for your approval | | Goes back to an earlier theme | Company administrators | Changes · needs “change settings” · waits for your approval | | Uploads a logo for the theme | Company administrators | Changes · needs “change settings” · waits for your approval | | Lists the company's agent images | Company administrators | Reads · needs “look” | | Adds an agent image | Company administrators | Changes · needs “change settings” · waits for your approval | | Lists the people in the company | Company administrators | Reads · needs “look” | | Searches the company's people | Company administrators | Reads · needs “look” | | Invites a person to the company | Company administrators | Reaches outside · needs “change settings” · waits for your approval | | Changes a person's role or details | Company administrators | Changes · needs “change settings” · waits for your approval | | Signs a person out everywhere | Company administrators | Cannot be undone · needs “change settings” · waits for your approval | | Preview or invite many people | Company administrators | Reaches outside · needs “change settings” · waits for your approval | | List roles | Anyone who can see it | Reads · needs “look” | | Run a security action | Company administrators | Changes · needs “change settings” · waits for your approval | | Run a single sign-on action | Company administrators | Changes · needs “change settings” · waits for your approval | | Read Microsoft sign-in settings | Company administrators | Reads · needs “look” | | Save Microsoft sign-in settings | Company administrators | Changes · needs “change settings” · waits for your approval | | Record Microsoft admin approval | Company administrators | Changes · needs “change settings” · waits for your approval | | Read company validation checks | Company administrators | Reads · needs “look” | | Save company validation checks | Company administrators | Changes · needs “change settings” · waits for your approval | | Try a validation check | Company administrators | Changes · needs “change settings” · waits for your approval | | Shows what moving agents or instructions between categories would change | Company administrators | Reads · needs “look” | | Moves agents or instructions between categories, using a preview you made just before | Company administrators | Changes · needs “change settings” · waits for your approval | | Run a model settings action | Company administrators | Changes · needs “change settings” · waits for your approval | | Lists the models you can choose for an agent | Anyone who can see it | Reads · needs “look” | | Get agent daily cost cap | Anyone who can see it | Reads · needs “look” | | Save a model credential | Company administrators | Changes · needs “change settings” · waits for your approval | | Read billing details | Company administrators | Reads · needs “look” | | Read the company plan | Company administrators | Reads · needs “look” | | Lists the company's payment methods | Company administrators | Reads · needs “look” | | Adds a payment method | Company administrators | Changes · needs “change settings” · waits for your approval | | Open the billing portal | Company administrators | Reaches outside · needs “change settings” · waits for your approval | | Download billing invoice | Company administrators | Reads · needs “look” | | Lists entries in the company's audit log | Company administrators | Reads · needs “look” | | Searches the company's audit log | Company administrators | Reads · needs “look” | | Export the audit log | Company administrators | Changes · needs “change settings” · waits for your approval | | Run a data privacy action | Company administrators | Changes · needs “change settings” · waits for your approval | | List privacy requests | Company administrators | Reads · needs “look” | | Record a privacy request | Company administrators | Changes · needs “change settings” · waits for your approval | | Complete a privacy request | Company administrators | Cannot be undone · needs “change settings” · waits for your approval | | Export authored content | Company administrators | Changes · needs “change settings” · waits for your approval | | Lists the cloud accounts the company deploys agents to | Company administrators | Reads · needs “look” | | Adds a cloud account to deploy agents to | Company administrators | Changes · needs “change settings” · waits for your approval | | Read deployment details | Company administrators | Reads · needs “look” | ## Related - Next: [Reports](https://falcon.com/docs/reports.md) - [Glossary](https://falcon.com/docs/glossary.md)