Team administration
Area for owners and admins to manage members (including in bulk), invites, custom roles, audit, exports, trash, moderation, session policy, imports and billing.
Company admin gathers everything that only owners and admins of the team can do. Open it from the sidebar (Company admin) or type g then a outside a text field. Anyone who is not an owner or admin gets a refusal (403) when opening any section. The rules for each role are in roles and permissions.
Members and invites
Users lists members with name, email and role, with search and a role filter, and downloads the list as CSV or JSON. Bulk role changes and removals live under Settings > Members:
- Tick the members in the table.
- Choose the new role (Owner, Admin, Member or Guest) and click Alterar papel (change role), or use Enviar mensagem (send message; a title and text, delivered as a notification) or Remover (remove). These buttons are labeled in Portuguese.
- Confirm. The result shows, line by line, what worked and what failed, with the reason.
Each batch accepts up to 100 people, each one is processed independently (a failure does not block the others) and the same rules as the individual action apply: you cannot act on yourself and the last owner is protected.
Invites lists pending ones: email, role, who invited, send date and expiry (invites expire on their own after 14 days). Invite by email choosing the role; Resend rotates the token and sends again; Revoke cancels. Only an owner invites another owner or admin. If the installation has no email sending configured, the invite stays recorded and you share the URL. The accepted domains are controlled in the session policy.
Roles, access and projects
Access control shows the built-in roles, each project’s dominant scope and the Add client wizard, which in three steps invites an outside person with restricted access: email, project and modules (Chat, Tasks, Files, Wiki, Timeline). Projects lists all projects with privacy, channels and timelines, and the channel and timeline admin pages let you archive or configure the containers.
Custom roles (Business plan) creates tailored roles by ticking permissions in groups: Timeline & chat, Tasks, Files, Notes, Finance, and Flowchart & calendar. The four built-in roles are not editable. Deleting a custom role removes the permissions from whoever had it.
Audit and exports
The Audit log is the immutable record of administrative actions. Filter by period (From, To), Actor, Entity type and Action (exact match, such as member.removed), click a row to see its payload and use Export CSV or Export JSON, which honor the filters. The list pages 100 at a time. The members export (CSV and JSON) comes from the Users screen; the tasks exports (CSV and JSON) exist in the API, still without a button.
Trash and moderation
The Trash holds what ordinary users removed: posts, comments, messages, files, timelines and channels. Filter by type, Restore puts the item back in view, Delete erases for good (no way back). Ordinary users cannot access this area. The per-workspace retention period is configured through the API.
Moderation has two tabs. Under Reports, Review opens the report and you resolve it with Hide content, Delete content, Dismiss report or Escalate to platform, with a note. Under Bans, Ban user asks for the user, a reason and an optional expiry date; Lift ban reverts it.
Security and team settings
Session policy sets the idle time before logout (0 = no limit), the maximum concurrent sessions per user (0 = unlimited), whether 2FA is required for owners and admins (anyone who has not set it up is forced to on next login), the allowed email domains for invites and the default role when accepting an invite. Workspace handles branding (logo and favicon URL, primary color, custom domain on business plans and above), timezone and language.
Bulk imports processes large Notion exports (Markdown and CSV ZIP, each CSV becomes a batch of tasks) and Slack exports (ZIP, messages into the chosen channel) in the background, with counters for imported, skipped and failed, and View logs.
Billing and privacy
Billing shows the current plan (change, reactivate or cancel at period end), Usage (seats, storage and the month’s AI tokens), invoice history, billing details (a CNPJ or CPF is required for B2B invoices) and Redeem coupon. Payment methods only store the registration for now: the gateway integration is still pending. GDPR / LGPD lets you request an export of your data (a ZIP, with a link when processing ends) or deletion of your account, which runs after a 30-day grace period and can be canceled before then.