Admin & Tenants
The Admin & Tenants module is the platform-level workspace for tenant administrators — the people who run an ORKSTRA tenant for their firm.
Overview
Tenants are fully isolated from each other. Within a tenant, the admin manages companies (legal entities), users, roles, branding, billing, security policy, and integrations.
Key concepts
Tenant. The top-level container — your contracting firm. Provisioned by ORKSTRA at sign-up.
Company. A legal entity within the tenant — UAE LLC, KSA branch. Has its own currency, tax registration, address.
Tenant branding. Logo, primary color, custom domain (Premium), email templates.
Tenant settings. Default time zone, default locale, allowed file types, max project size, fiscal year start.
Tenant license. Edition (Starter / Professional / Premium / Enterprise), seat count, module access, renewal date.
Tenant data export. On-demand export of all tenant data (GDPR-style) as ZIP of CSV/JSON.
Tenant suspension / termination. Suspended tenants are read-only. Terminated tenants have a 90-day grace period before data deletion.
Step-by-step: add a company
- Admin → Companies → New.
- Fill in legal name (AR + EN), trade license number, tax registration, address, currency.
- Upload logo and trade license PDF.
- Save. Users can now be assigned roles on the new company.
Step-by-step: customize branding
- Admin → Branding.
- Upload logo (SVG preferred), favicon.
- Pick primary and accent colors.
- Customize email template header / footer.
- (Premium) Set custom domain — DNS instructions provided.
- Save — branding propagates within 5 minutes.
Step-by-step: invite a user
- Admin → Users → Invite.
- Enter email, name (AR + EN), job title.
- Assign initial roles per company.
- Click Send invite. The user receives an activation email.
Step-by-step: export all tenant data
- Admin → Data → Export tenant data.
- Confirm via re-auth.
- ORKSTRA queues an export job; ETA emailed.
- Download link valid for 7 days.
Common tasks
- Bulk import users: Admin → Users → Bulk import Excel template.
- Configure SSO: Admin → Security → SSO for SAML 2.0 or OIDC.
- View tenant usage: Admin → Dashboard for storage, projects, active users.
- Set fiscal year start: Admin → Settings → Fiscal year.
Troubleshooting
- "User can't log in after invite." — Invite link may have expired (72h). Resend.
- "Branding didn't update." — CDN cache. Force refresh with Ctrl+Shift+R. If still not updated after 10 minutes, contact support.
- "SSO loop after auth." — Most likely a clock skew between IdP and ORKSTRA. Verify NTP on the IdP.
- "Custom domain shows certificate error." — DNS propagation delay or wrong CNAME. Verify with
dig.
Permissions reference
| Permission | Who needs it |
|---|---|
TENANT_VIEW | Tenant admins |
TENANT_SETTINGS_EDIT | Tenant admins |
TENANT_BRANDING_EDIT | Tenant admins |
TENANT_USER_INVITE | Tenant admins |
TENANT_DATA_EXPORT | Tenant admins, Compliance |
See also: RBAC, Admin overview, API & Webhooks.