How Do I Use the Admin Portal to Manage Users and Billing?
Last updated: July 30, 2026
Available on: Web (admin.wisprflow.ai). The desktop and mobile apps can invite users and approve join requests, but all other admin tasks are web-only.
Add a teammate, change someone's role, set up billing, or update organization settings — the Admin Portal handles all of it. Most tasks take under 2 minutes.
How to access the Admin Portal
Go to admin.wisprflow.ai and sign in with your admin credentials.
Use the left sidebar to navigate between Users, Settings, Billing, and Audit Logs.
Admin roles at a glance
Wispr Flow has three assignable enterprise roles. Access differs by role (what actions you can take), not by which app you open.
Member — standard user, billable
A standard Wispr Flow user with full dictation access. Members can view the team and billing pages but cannot make admin changes. Consumes a billable seat.
Admin — full management, billable
Can manage users, billing, and organization settings, and has full dictation access. Consumes a billable seat.
IT Admin — management only, free, web-only
Can manage team members and enterprise settings, but cannot use Wispr Flow dictation. IT Admin seats are always free and never count toward your billed seat total. IT Admins are blocked from the desktop app: opening it shows a modal with two options, Sign Out or Go to Admin Portal. This role is designed for IT staff who administer the org from the web portal without dictating.
Change a member's role
Click Users in the left sidebar.
Find the member you want to update and click the role dropdown next to their name.
Select the new role: Admin, IT Admin, or Member.
Confirm the change in the dialog that appears. The new role takes effect immediately.
Note: Admins can change their own role (for example, switching between Admin and IT Admin) directly from the Team member table. You cannot change your own role to Member — another admin must make that change to prevent accidental loss of admin access.
Important: When changing a member to or from IT Admin, read the confirmation dialog carefully. IT Admin changes affect both product access and your paid seat count.
Where each role works
Web Admin Portal: All policy configuration lives here — SSO, SCIM, data retention, IP allowlist, member role changes, member removal, domain settings, billing, and audit logs. Members can sign in to view org details, members, and billing data, but admin actions are admin-only.
Desktop app: Admins can invite users (when SCIM is not active) and approve or deny join requests, plus open the Admin Portal via a button. All other policy configuration must be done in the web portal.
Mobile apps (iOS, Android): No admin management UI. Admins must use the web portal to manage the organization.
Related restrictions you can configure
While you can't split access by client, admins can restrict access in these adjacent ways (all Enterprise):
IP allowlist: Restricts authenticated access to approved IP ranges across desktop, web, and iOS. See Network access below.
App deny list: Blocks dictation in specific desktop applications. Desktop-only, and enabled per-organization by Wispr — contact support if you need it.
SSO enforcement: Forces all sign-ins through your identity provider.
SCIM provisioning: Locks user creation and removal to your identity provider.
How to add users
Note: When SCIM is active, Add User, batch-invite, and Approve/Deny buttons are all hidden — user provisioning happens only through your identity provider.
Add users manually (one at a time)
Use this method to invite a specific person one at a time.
Click Users in the left sidebar.
Click Add user in the top right.
Enter the user's email and select their role (Admin, IT Admin, or Member) from the dropdown.
Click Send invite. The user appears in your list with Status "—" and Role "Pending" until they accept.
If the email already belongs to a team member or has a pending invitation, you'll see a duplicate notification and the invite won't be sent. You can re-send invitations at any time.
Note: Non-admin team members cannot send invitations directly. When a non-admin clicks Add user, a contact-admin request is sent to team admins instead. Admins receive a periodic batched notification email summarizing invite requests from non-admin members.
Invite multiple teammates at once
Use this method to send invitations to several people in a single step from the Team page in the Admin Portal.
Go to admin.wisprflow.ai/app/team and click Add user.
Type or paste email addresses into the input field. You can enter plain email addresses (
name@example.com) or formatted addresses ("Name" <name@example.com>) — mix and match as needed. Each address becomes a chip as you add it.Select a role (Admin, IT Admin, or Member) to apply to all invitees in this batch.
Click Send invites. A results panel appears breaking down the outcome for each address.
The results panel groups addresses into the following categories:
Invited: Invitation sent successfully.
Already on your team: The person is already an active member.
Already belongs to another team: The email is associated with a different team and cannot be invited.
Already invited: A pending invitation already exists for this address.
Couldn't be invited: The invite failed due to a sending error. These addresses are restored as chips so you can retry them.
If the entire batch fails at once (for example, because your seat cap is reached), all addresses are restored as chips so nothing is lost.
Note: Non-admin team members cannot send bulk invitations. When a non-admin submits multiple addresses, a contact-admin request is sent to team admins for each email.
Add users via invite link
Use this method to add many people without inviting each one.
Go to the Team page in the Admin Portal.
Click the button to copy your invite link.
Share the link with anyone you want to add.
Anyone who signs up through the link is added to your team automatically, no approval required. Your team has a single shared invite link, available to all admins. It's also available in the desktop app under Settings → Team.
Add users automatically by company email
Use this method to let anyone with your corporate email domain join automatically.
During team creation, on the Name your team step (after adding members), if your email uses a corporate domain, a checkbox appears: "Automatically add new users with a [domain] email to my team." This is enabled by default.
Once the team is created, this setting cannot be changed from the desktop client. Users with public email domains (Gmail, Yahoo, etc.) do not see this option.
Note: In multi-team enterprises, users added automatically via email domain must still select their team before they can use Wispr Flow. They are held at a mandatory Team Picker screen until they make a selection — no plan access is granted in the meantime. If your enterprise uses cost-center billing, teams are grouped by cost center on this screen. Members in single-team enterprises are automatically placed.
Add multiple users during initial team setup
Use this method during initial team creation to invite a batch of teammates.
The team creation flow walks you through three steps: add members, name your team, then confirmation. On the first step, you can enter multiple email addresses at once. If Wispr Flow detects other users already on your email domain, they'll appear in a table so you can invite them all in one click.
Important: Enterprise plans have a contractual seat cap. If you've hit your cap, contact support to raise it.
How to understand your seat usage
Every member falls into exactly one of these four categories:
Active: Active members who are currently billed.
Trialing: Members in their free 2-week trial. They are not billed yet, but convert to a paid seat when the trial ends.
Invited: Members with a pending invitation. They count toward your seat total once they accept.
IT Admin: Never billed. IT Admin seats are excluded from your billed seat total and from the seat breakdown shown in the Plans card and Team tab.
Seat counts are shown consistently across Settings. The Plans card subtitle shows either N seats (using the count of active members) when nobody is on trial, or {active} active · {trialing} trialing when there are trialing members. The Team tab shows a one-line breakdown banner joined by " · " with only non-zero categories, for example 70 active · 6 trialing · 4 invited · 2 IT admin.
How to remove users
Click Users in the left sidebar.
Click the user you want to remove to open their details.
Open the ⋯ More actions menu and select Remove member (or Revoke invite for pending invitations).
Confirm the removal. The user disappears from your list and your seat count updates immediately.
Note: When a user is removed from an enterprise team, their desktop app automatically reflects their updated status. If they are eligible to purchase an individual plan, they can do so immediately from the app without needing to restart it.
Important: When a Pro subscriber joins a team that has no billing info on file, the Pro subscriber may become the team's payer. Contact support if you need help transitioning individual subscriptions.
How to manage organization settings
Enterprise admins can control settings for the entire organization from Settings → Organization. These controls override individual user preferences.
Data controls
The Data Controls section enforces data and privacy settings across your team:
Context Awareness: Controls whether Wispr Flow can read on-screen context to improve transcription. Set to Available (users can toggle it themselves) or Disable for all users (turns it off everywhere and locks the toggle).
Zero Data Retention: Enforces zero data retention (ZDR) across your organization.
Local data storage policy: Controls how local data is stored — store normally, auto-delete after 24 hours, or never store. Enforcement differs by platform:
On iOS, when the policy is Auto-delete after 24 hours or Never store data locally, the "Automatically delete transcripts" toggle in Settings → Data & Privacy is forced on and locked, and displays "Required by your organization's data retention policy."
On Desktop, the Local Storage dropdown is fully disabled (with the message "This setting is managed by your organization.") only when the policy is Never store data locally. Auto-delete after 24 hours acts as a floor — users can pick a more restrictive option but not a less restrictive one.
SOC2 report access: Provides your organization's SOC2 report.
HIPAA BAA: Sign or view a HIPAA Business Associate Agreement for your organization.
Note: Signing the HIPAA BAA in-app requires the signer's Legal Name and agreement to the BAA terms.
Network access
The Network access section lets you restrict which IP addresses can access your team's data. When an IP allowlist is enabled, only users connecting from an approved IP address or range can authenticate.
Enable allowlist: Turn on IP-based access restrictions for your organization.
Configure allowed ranges: Enter one CIDR per entry (IPv4 or IPv6). Wildcard CIDRs and empty lists are rejected — to allow all traffic, disable the allowlist instead. Host bits are automatically normalized to the network address, and duplicates are silently deduplicated.
Look up your current IP: Your current IP address is shown in the portal so you can confirm it's covered before saving. Resubmitting the same list from an IP outside it will still succeed, so unrelated saves don't break.
Disable allowlist: Turning off the allowlist removes the saved configuration. The lockout safeguard still applies — your current IP must be covered by the existing list before you can disable it.
Note: The IP allowlist applies across desktop, web, and iOS. Android enforcement is not yet available. Users blocked by the allowlist are signed out and shown a "Your network isn't allowed" screen. See the FAQs below for the full user experience.
Important: If you get locked out of the IP allowlist, contact Wispr support — support is the recovery path for IP allowlist changes.
Usage settings
The Usage section controls what team members see on the Usage dashboard:
Hide team leaderboard: When enabled, the Leaderboard tab is hidden for everyone in the organization, including admins. This applies regardless of team size or domain.
How to review audit logs
The Audit Logs page in the left sidebar gives enterprise admins a history of team membership changes and join request decisions.
What's recorded
Each log entry shows the timestamp, action taken, who performed it, who it affected, and the method used (for example, invitation, SCIM, or removed by admin). The following event types are recorded:
Member added
Member removed
Join request approved
Join request rejected
Filtering and browsing
Use the filter bar to narrow results by date range (up to 92 days), event type, the admin who performed the action, or the user who was affected. Results are paginated.
How to manage cost centers
Note: The Cost Centers tab is only visible to admins of Enterprise organizations with per-cost-center billing enabled. Contact support if you believe your organization should have access.
Cost centers let enterprise admins give individual teams their own separate billing, rather than having all teams roll up into the enterprise's default bill. Each cost center has its own subscription at your enterprise's negotiated price.
To view your cost centers, go to the Team page in the Admin Portal and click the Cost Centers tab. The tab shows each cost center's name, status, seat count, and team count.
Note: Cost-center grouping on the Team Picker only appears when your enterprise has more than one cost center. Single-cost-center enterprises see a flat team list.
Break a team into its own cost center
Go to the Team page and click the Cost Centers tab.
Select the team you want to move into its own cost center.
Complete the checkout that appears. Your enterprise's negotiated price is applied automatically — you do not choose a plan.
Confirm the checkout. The team is immediately moved into the new cost center with its own billing.
Important: If you are already the billing owner of another cost center within the same enterprise, you cannot initiate this process — a different admin must complete the checkout instead. Enterprises on a negotiated contract cannot self-serve — contact sales instead. You also cannot break away a team if its source cost center has only one team.
How to view team insights and usage
The Insights page in the Admin Portal gives admins a view of how their team is using Wispr Flow. Use the tabs across the top to switch between different views.
Note: Team-wide Insights (Impact tab and Overview tab) are available to Enterprise admins only. Pro plan admins do not have access.
Impact tab
The Impact tab surfaces the business value your team is getting from Wispr Flow. The Impact tab supports only the Team filter (not date, app, or user). It includes:
Minutes Saved: Total time your team has saved by dictating instead of typing, calculated against a typed-baseline reading speed. This is an all-time (lifetime) figure. Hover the info icon on the card for details about how this is calculated.
Money Saved: Estimated ROI based on total minutes saved across your whole team over the trailing 30 days. Use the salary-rate slider to adjust the calculation for your team's average compensation. When a team filter is applied, Money Saved is pro-rated by that team's seat share.
Prompt Quality: A measure of how much better your team's dictations are compared to typed prompts, shown as a multiplier (e.g., "2.2x" means dictated prompts are 2.2 times higher quality than the typed baseline). This card is hidden if there are no AI dictations or if the average is at or below the typed baseline.
Auto-Formatting: Breakdown of how often Flow automatically formats text for your team, including edits made after dictation as a sub-category.
Features Used: Adoption of specific features — Dictionary, Snippets, and Styles — across your team.
Dictionary items: How many words have been added to the team dictionary, broken down by auto-learned vs. manually added.
Team Members table
The Team Members table on the Usage dashboard includes a WPM column showing each user's lifetime average dictation speed. Users who haven't dictated yet show "—" rather than "0 WPM," and those rows are grouped at the bottom when you sort by WPM in either direction.
You can sort the table by clicking any column header: Name, Status, Department, Words, WPM, Last used, and Role. The Role column sorts alphabetically. Members with no role assigned are always pinned to the bottom regardless of sort direction.
Percent-change indicators
Metrics on the Usage dashboard (such as words dictated, team members, and desktop apps used) show a percent change compared to the equivalent prior period. The comparison updates automatically based on your selected time filter — for example, "Last month" compares to the month before, and "Last 30 days" compares to the previous 30 days. The label next to each indicator (e.g., "from last month" or "from previous 30 days") reflects the active filter so you always know what's being compared.
Filtering usage data
Use the filter bar on the Overview tab to narrow data by date range, app, user, or team. The Team filter is searchable — type to find a specific team quickly, just like the User and App filters. A few things to know about filtering:
User filter (multi-select): Select multiple team members at once to scope charts and exports to just those users. When more than one user is selected, the filter label collapses to show the number of users selected (e.g., "3 users").
App filter — Clear filter: A full-width "Clear filter" button appears below the search box for quick access.
App filter — Category limits: Each app category shows a limited number of apps. If there are more, a "+N more" row appears at the bottom of that category.
App filter — Search: Searching collapses categories with no matching apps so you can find what you need faster.
App filter — Auto-expand: Selecting a category or any app within it automatically expands that category's sub-list.
Exporting usage data
You can download your team's usage data as a CSV from the Overview tab. Click the download icon to open the Export usage data dialog. From there you can:
Set export filters independently from the page filters — adjust the date range, app, user, and team without changing what's displayed on the page.
Choose which columns to include in the export: User, User email, Department, App type, and Apps.
Download the CSV with a descriptive filename that reflects the filters you applied.
Every export includes a Date column as the first column and shows one row per day per dimension combination, sorted chronologically. This means you'll always see a daily breakdown of activity rather than a single totals row.
Note: Very large exports may be capped — if your filters produce too many rows, you'll be prompted to narrow the range. The exported CSV column for team is labeled Department.
How to manage billing
Click Settings → Billing in the left sidebar.
Click Manage Subscription to open the billing portal.
From the billing portal, you can:
Update or change your subscription plan.
Add or update payment methods.
View and download invoices.
Note: Any team member can view the billing page, but making changes requires admin access.
Billing during a trial
If you add billing information during an active trial, the Payment Summary modal shows $0 billed today and tells you when your first charge will occur (e.g., "Billed in X days for Y seats"). During checkout you can toggle your plan to Annual in the Payment Summary modal, then click Save with Annual to start your new billing cycle at the discounted annual rate.
If your trial has already ended, the modal shows the actual charge due today with a note that billing starts immediately at checkout.
Switch to annual billing
From Settings → Plans and Billing, click Save with Annual on your plan card. You'll be taken to the billing portal (or the Admin Portal for team admins) to switch cycles.
What happens when your trial ends
When your trial expires, admins have a grace period (see the sidebar countdown, typically 3 days) to add billing information before the team loses access to plan features. Add billing information before the grace period expires to keep access.
During the grace period, you'll see these prompts to add billing:
In-app trial banner: While your trial is still active and billing hasn't been added yet, a banner appears above the members table in Settings → Team. Click Add billing info to enter your payment details without leaving the page.
One-time pop-up modal: The first time an admin without a subscription opens the app after the trial ends, a modal prompts them to add billing info. The Add billing info button opens the Payment Summary directly.
Persistent sidebar banner: A banner stays visible in the sidebar throughout the grace period. Both the modal and banner disappear once a subscription is active or the grace period expires.
Non-admin members: Non-admins do not see a grace-period banner in the sidebar. Ask them to contact you (their admin) if they need help.
Common issues
Users whose team was disbanded or whose trial expired were stuck on a "Rejoin your team" screen and couldn't purchase individual Pro
This affected users who were removed from an enterprise (because their team was disbanded or their trial expired) and then saw a "Rejoin your team" card on the billing screen that didn't work, blocking them from purchasing an individual Pro plan. This has been fixed. The desktop app now correctly refreshes your membership state when you are removed from an enterprise, and the "Rejoin" option is hidden when the enterprise cannot actually be rejoined. If you were previously stuck on this screen, update Wispr Flow to the latest version and reopen the app — you should be able to purchase individual Pro normally.
The sidebar showed "Trial ends in 0 days" for team members mid-trial
This was caused by the trial countdown reading the member's personal trial date (often unset) instead of the team's actual plan end date. This has been fixed. The sidebar now correctly shows the remaining days based on the team's trial end date (e.g., "Your trial ends in 14 days"). Update Wispr Flow to the latest version if you still see "0 days."
iOS members could still turn off auto-delete transcripts when a data retention policy was enforced
This was caused by the iOS app not correctly reading the organization's data retention policy set in the Admin Portal. This has been fixed. When an admin sets the local data storage policy to Auto-delete after 24 hours or Never store data locally, iOS members' "Automatically delete transcripts" toggle is now forced on and locked. Update Wispr Flow to the latest version on iOS to ensure the policy is applied correctly.
Prompt Quality card showed unexpectedly low percentages (e.g., "2%" instead of "200%")
This was caused by a display issue on the Impact tab that showed the Prompt Quality value at the wrong scale. This has been fixed. The card now shows improvement as a multiplier (e.g., "2.2x"), making it easier to compare against the typed-prompt baseline.
Usage dashboard charts showed incorrect date labels for partial weeks
This was caused by a date-boundary issue when computing chart labels at the edge of the selected filter range — for example, a "This month" filter starting May 1 could show "Apr 26" on the chart. This has been fixed. Chart labels now correctly reflect the actual dates within the selected filter range.
Clicking column headers in the Team Members table had no effect
This was caused by sorting not being enabled on the Usage → Team Members table headers. This has been fixed. You can now click any column header — Name, Status, Department, Words, WPM, Last used, and Role — to sort the table. Update Wispr Flow to the latest version if the issue persists.
FAQs
Can I restrict members to the desktop app only and admins to the web portal?
No. There's no setting that limits a role to a single surface. Both members and admins can use the desktop app, mobile apps, and the web Admin Portal. Differences are by role (what actions you can perform), not by client. The one exception is the IT Admin role, which is blocked from the desktop app — but that's fixed role behavior, not a configurable policy. See "Where each role works" above.
How do I add another license (seat) to my team, and how are additional seats billed?
You don't increase seat quantity directly — add seats by inviting or adding team members from Users → Add user. Wispr Flow updates your seat count automatically as people join and become billable.
How billing works depends on the member's status:
New trial-eligible members: Start a 14-day free trial first. When the trial ends, they're automatically added to your account as a billed seat.
Members who already used a trial: May become a paid seat immediately when added. If your team has no billing information on file and the user is not trial-eligible, the invite may be blocked until billing is added.
Admins and Members: Billable roles with full Wispr Flow access.
IT Admins: Free management-only seats. They never count toward your billed seat total and don't receive dictation access.
Pending invitations: Don't become billed seats until accepted, but they may count toward an enterprise seat cap.
If Add user isn't available, check that your role is Admin and that your organization hasn't reached its contractual seat cap. Contact support to raise the cap.
To review charges, payment methods, or invoices, go to Settings → Billing in the Admin Portal and open Manage Subscription. Any team member can view the billing page, but making changes requires admin access.
How does the IT Admin role affect seats and product access?
IT Admin is a management-only seat type. IT Admins can manage team members and enterprise settings, but cannot use Wispr Flow dictation or Pro features, and are blocked from the desktop app. IT Admin seats are always free and never count toward your billed seat total.
If you're an IT Admin and need dictation access, go to the Admin Portal and change your role to Member or Admin, or purchase an individual subscription. The dictation block clears automatically once your role is updated — no need to sign out and back in.
Can users change their email address?
No. Email addresses cannot be changed. To use a different email, cancel the existing subscription and create a new account. You can update your first name, last name, and profile picture from the Account settings page.
Important: Creating a new account results in data loss. Contact support if you need billing adjustments during the transition.
How do I upgrade to Enterprise without contacting sales?
Team members on a trial who haven't set up billing can upgrade directly:
Open the desktop app and go to Settings → Plans and Billing.
Select Enterprise from the plan dropdown, choose your billing cycle, and click Continue to Payment.
Enter your payment information. Your upgrade takes effect immediately.
If the plan selector isn't visible, the modal defaults to Pro. After completing checkout, click Finished paying? Click to refresh in the Payment Summary modal to update your subscription status.
You can also start billing setup directly from the trial banner in Settings → Team by clicking Add billing info.
How do I accept a team invite?
If you've been invited to a team, a card appears in the sidebar of the desktop app. Click Accept invite to join. You can also manage your team membership at any time from Settings → Team.
After accepting, you'll see a notification shortly after your next dictation confirming you've joined the team. The message reflects your billing situation — for example, whether you're starting a new 2-week trial or your existing subscription has been rolled into the team plan.
How do I rejoin my team after trial expiration?
If you were removed after the grace period and the enterprise team is still active:
Go to Settings → Team in the desktop client.
Click Rejoin team. You'll see a confirmation message when successful.
Important: Add billing information within 24 hours of rejoining, or you'll be removed from the team again.
If the Rejoin team option is not available, the enterprise may have been disbanded or no longer has active billing. In that case, you can purchase an individual Pro plan directly from the app.
What happens when my subscription is cancelled?
A warning banner appears on the Billing page showing when your subscription ends. You keep access until that date, and any invoices during this period show a renewal amount of $0.
How do I join an existing team on my domain?
Follow these steps from the desktop client:
Go to Settings → Team in the desktop client.
Click Request to join team. An admin must approve your request before you're added.
After clicking, the button changes to "Your request has been sent" and cannot be clicked again for a few minutes. Some teams have auto-accept enabled, in which case you join immediately. If an admin declines your request, you'll see a message asking you to contact your admin directly.
Important: If you have an active Pro subscription and the team has no billing information, you may become the payer for the team.
How are users sorted in the dashboard?
On the Users page, active members are sorted by role (admins first), then alphabetically by email. Pending invitations are sorted alphabetically by email and listed below active members.
On the Usage → Team Members table, you can click any column header to sort by that column. Active members in a trial show "In trial, ends [date]" (e.g., "In trial, ends Jan 5").
What does a team member see when I upgrade them?
When you upgrade a team member to Flow Pro or Flow Enterprise, they see a one-time celebratory modal the next time they open the app, showing their new plan name and what's included.
Flow Enterprise members are then taken through a short guided tour highlighting key team features — Insights, Dictionary, and Snippets — in the sidebar. They can move through the tour with the Back and Next buttons, or dismiss it with the X button or the Escape key. No action is required on your end.
What do my users see if they're blocked by the IP allowlist?
When a user opens the desktop app from a network that isn't on your approved list, they are signed out automatically and shown a "Your network isn't allowed" screen. It displays your organization's name and explains that Wispr Flow is only available on approved networks. Dictation is paused while they are blocked.
From that screen, the user has two options:
Retry: Restarts the sign-in process. Use this after switching to an approved network.
Sign Out: Returns to the normal login screen.
Once the user is on an approved network and signs in again, access is restored normally.
Why can't I set up a new cost center for my team?
If you are already the billing owner of another cost center within the same enterprise, you are blocked from initiating a new one. This is by design — a different admin who doesn't already own a cost center must complete the checkout instead. If no other admin is available, contact support.
Can I revoke a signed HIPAA BAA for my organization?
Yes. Revocation of a signed HIPAA BAA is handled through the Admin Portal. Contact support if the option isn't available.
What happens if a new member in a multi-team enterprise hasn't been assigned to a team?
During onboarding, they'll see a Team Picker screen where they must select one team to join before continuing. They are held at this screen until they make a selection — no plan access is granted in the meantime. If your enterprise uses cost-center billing and has more than one cost center, the picker groups teams under their respective cost-center headers. Members in a single-team enterprise are automatically placed in that team and won't see this screen.
How far back do audit logs go?
You can filter audit logs by date range up to 92 days. For records beyond that window, contact support.
Limitations and notes
The Admin Portal is web-only, available at admin.wisprflow.ai.
Role differences are enforced at the action level, not by client. There is no setting that restricts a role to a single surface (desktop, mobile, or web). The IT Admin role is the only role blocked from a surface (the desktop app).
All org-level policy configuration (SSO, SCIM, data retention, IP allowlist, app deny list, role changes, member removal) is done in the web Admin Portal. The desktop app exposes only inviting users and approving join requests, plus a link to the portal. Mobile apps have no admin UI.
Data Controls (Context Awareness, ZDR, local storage policy, SOC2, HIPAA BAA) are available on the Enterprise plan only.
Network access (IP allowlist) is available on the Enterprise plan and is currently rolling out in stages. If your organization is on Enterprise and doesn't see it yet, contact support to request access.
The IP allowlist applies across desktop, web, and iOS. Android enforcement is not yet available.
Team-wide Insights (Overview and Impact tabs, filters, and Export) are available to Enterprise admins only.
Cost Centers are available on Enterprise plans with per-cost-center billing enabled. An admin who already owns the billing for another cost center in the same enterprise cannot create an additional one — a different admin must do so.
Audit Logs are available on the Enterprise plan. Logs can be filtered by date range up to 92 days.
In multi-team enterprises, new members who have not been pre-assigned to a team must select their team during onboarding via the Team Picker. Members in single-team enterprises are automatically placed.
Email addresses cannot be changed once an account is created.
Still need help?
Reach out to our support team if:
You need to increase your enterprise seat cap or enable the IP allowlist for your organization.
You're locked out of your admin account or can't access the Admin Portal.
You need billing adjustments after changing accounts or plans.
You need to enable per-cost-center billing for your enterprise or have questions about cost center setup.
Include your team name, admin email, and what you've already tried. Most admin issues are resolved in one reply.