My Company administration

Use My Company to view or, with the required company-administration permission, manage company identity, users, groups, permissions, and invitations. These changes affect other people and access to data; they are approval-required operational actions.

Sections

Section	Purpose	Safe documentation handling
My permissions	Shows your computed company permissions.	Read-only review is safe.
Manage users	Lists company user accounts and their state.	Edit, deactivate, reactivate, or delete users only when approved by your company administrator.
Manage groups	Lists permission groups.	Do not alter membership, permissions, or delete groups without explicit approval.
Permissions	Shows or changes global permission settings.	Review only unless you are the authorized company administrator acting on an approved change.
Invite users	Sends email invitations to join the company.	Send invitations only to people who should join the company.
Company details	Creates or edits company details.	Do not change organization information without the owner’s approval.

Read-only procedure

1. Open My Company.
2. Start with My permissions and confirm whether you have company-management permission.
3. View the relevant section only to understand the current access model.
4. Stop before any form submission, invitation, row action, or save action.
5. If a change is required, document the requested outcome, affected users/groups, approver, and rollback plan before acting.

Administrative actions requiring explicit approval

The company UI supports actions including creating/editing a company, editing users, changing user groups or active state, deleting users, creating/editing/deleting groups, changing group users and permissions, setting global permissions, and inviting users. These are material changes and must not be performed merely to document the product.

Expected result

An administrator can understand where company controls live and which permissions they govern without accidentally changing company membership or access.

What the live company workspace contains

The current My Company page presents six operations:

• Users — a table of company accounts with email, first name, last name, active state, and created date. The page also provides the path to invite additional users.
• Groups — a table of groups with group name and group email, plus Create new Group.
• Permissions — company-wide defaults for company management, forms, workflows, uploaded files, and submissions. Each category offers an inherit/default choice plus progressively broader explicit choices.
• Invite users — a To field, a Message field, group checkboxes (for example Administrators, Guests, HR, and Test), and an invitation submit action.
• Company details — a company-name field, logo picker/upload, a 64×64 pixel logo requirement, and Save Changes.
• My permissions — computed permissions with [INHERIT] and [EXPLICIT] values for the same access categories, useful for diagnosing why an account can or cannot perform an action.

The following captures were taken from the live company UI without submitting any changes:

Permission vocabulary

The live permissions screen uses these access levels:

Area	Levels shown in the UI
Company management	Can manage company, or cannot create users/groups and edit company settings
Forms	Restrict access; allow viewing; allow viewing and editing
Workflows	Cannot kill/retry/edit workflows; can kill/retry/edit workflows
Uploaded files	Restrict access; read; upload; write (view, upload, delete)
Submissions	Restrict access; read (view/export); write (view/export/delete)

Choose inherit when the account should follow the lowest applicable group/company default. Choose an explicit value only when the resulting access has been approved; changing global defaults can affect every user.